CVE-2022-32978

There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan...

CVE-2022-32978

There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan...

CVE-2022-32978

CVE-2022-32978 affects the libjpeg library prior to 1.64, caused by an assertion failure in SingleComponentLSScan::ParseMCU when processing an empty JPEG-LS scan. This leads to denial of service and is documented across multiple sources; no exploitation details are provided beyond the assertion f...

CVE-2022-32978

There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan...

CVE-2022-32978

There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan...

jpeg-js 安全漏洞

jpeg-js is a JavaScript-based image processing program . A denial of service vulnerability exists in versions of jpeg-js prior to 0.4.4, which can be exploited by an attacker to conduct a DoS attack, as inputting a specific file will result in entering an infinite loop and never returning...

libjpeg 安全漏洞

libjpeg is a C language library for processing JPEG format image data. It includes JPEG decoding, JPEG encoding and other JPEG functions. A denial of service vulnerability exists in libjpeg versions prior to 1.64, which stems from an assertion failure in SingleComponentLSScan::ParseMCU via an emp...

CVE-2021-3697

A flaw was found in grub2 when handling JPEG images. This flaw allows an attacker to craft a malicious JPEG image, which leads to an underflow on a grub2's internal pointer, leading to a heap-based out-of-bounds write. Secure-boot mechanisms circumvention and arbitrary code execution may also be...

Oracle Linux 7 : grub2 (ELSA-2022-9469)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9469 advisory. - Add CVE-2022-28736 to the list JIRA: OLDIS-16371 - Fix: CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735...

grub2 缓冲区错误漏洞

grub2 is a Linux system boot program from the GNU community. A buffer error vulnerability exists in grub2, which can be exploited by an attacker to cause a buffer underflow write in the heap via a carefully crafted JPEG image...

08cms (1.0.0), 18a58t9c-upload (>=1.0.0, <=1.0.3) +3478 more potentially affected by CVE-2022-25851 via jpeg-js (>=0.0.1, <=0.4.3)

jpeg-js NPM version =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =0.0.2, =0.0.1, =0.0.3, =1.0.0-alpha.19, =0.0.2, =2.2.1, =3.4.7 - @lan/uni-libs 0.0.3 and more Source cves: CVE-2022-25851 Source advisory: SNYK:JS-JPEGJS-2859218...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return. PoC 1 Create a npm workspace npm init 2 Install the jpeg-js library 3 Create a JS file with the following code: js const jpeg...

libjpeg 代码问题漏洞

libjpeg is a C language library for processing JPEG format image data. It includes JPEG decoding, JPEG encoding and other JPEG functions. A denial of service vulnerability exists in libjpeg version 1.63, which stems from a null pointer dereference in LineBuffer::FetchRegion in linebuffer.cpp. An...

Magento Unrestricted file upload vulnerability

An unrestricted file upload vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can manipulate the Synchronization feature in the Media File Storage of the database to transform uploaded JPEG file into a PHP file...

CVE-2022-29430

Cross-Site Scripting XSS vulnerability in KubiQ's PNG to JPG plugin = 4.0 at WordPress via Cross-Site Request Forgery CSRF. Vulnerable parameter &jpgquality...

libsixel img2sixel Denial of Service Vulnerability (CNVD-2022-77874)

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. libsixel img2sixel version 1.8.6 is vulnerable to a denial-of-service vulnerability, which stems from an assertion failure error in stbijpeghuffdecode, stbimage.h:1894 . A...

libsixel img2sixel Denial of Service Vulnerability

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. libsixel img2sixel version 1.8.6 suffers from a denial of service vulnerability stemming from a floating-point exception error in ssixelencoderdoresize, encoder.c:633. A remo...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via an assertion failure in the stbijpeghuffdecode function, due to a crafted JPEG file. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and...

Denial Of Service (DoS)

libsixel.so is vulnerable to denial of service DoS attacks. A malicious user is able to cause denial-of-service conditions via a floating point exception error in sixelencoderdoresize function in encoder.c through a crafted JPEG file...

Denial Of Service (DoS)

libsixel.so is vulnerable to denial of service. An attacker can crash the application through the assertion failure error in the stbijpeghuffdecode function of stbimage.h by providing a crafted JPEG file...