Lucene search
+L

7253 matches found

BDU FSTEC
BDU FSTEC
•added 2024/04/25 12:00 a.m.•23 views

libheif Heap Buffer Overflow DoS

The vulnerability of the JpegEncoder::Encode function in file format decoders and encoders of the libheif library is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause service interruptions...

7.8CVSS6.9AI score0.00687EPSS
SaveExploits1References5Affected Software4
osv_ubuntu
osv_ubuntu
•added 2024/04/19 5:15 p.m.•17 views

UBUNTU-CVE-2023-51791

Buffer Overflow vulenrability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavcodec/jpegxlparser.c in genaliasmap...

7.8CVSS6.2AI score0.00273EPSS
SaveExploits0References3
Veracode
Veracode
•added 2024/04/16 8:33 a.m.•31 views

Use After Free

SixLabors.ImageSharp is vulnerable to Use After Free. The vulnerability is due to improper input validation within the JPEG and TGA decoders, which allows an attacker to craft malicious image files that could result in Information Disclosure during the conversion process...

6.5CVSS6.6AI score0.00575EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
•added 2024/04/15 8:24 p.m.•47 views

SixLabors.ImageSharp vulnerable to data leakage

Impact A data leakage flaw was found in ImageSharp's JPEG and TGA decoders. This vulnerability is triggered when an attacker passes a specially crafted JPEG or TGA image file to a software using ImageSharp, potentially disclosing sensitive information from other parts of the software in the...

6.5CVSS6.7AI score0.00575EPSS
SaveExploits0References5Affected Software1
Snyk
Snyk
•added 2024/04/15 8:24 p.m.•25 views

Sensitive Information in Resource Not Removed Before Reuse

Overview Affected versions of this package are vulnerable to Sensitive Information in Resource Not Removed Before Reuse due to a flaw in the JPEG and TGA decoders, when a specially crafted image file is passed to a software using ImageSharp. An attacker can potentially disclose sensitive...

6.5CVSS6.5AI score0.00575EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2024/04/15 8:24 p.m.•29 views

GHSA-5X7M-6737-26CR SixLabors.ImageSharp vulnerable to data leakage

Impact A data leakage flaw was found in ImageSharp's JPEG and TGA decoders. This vulnerability is triggered when an attacker passes a specially crafted JPEG or TGA image file to a software using ImageSharp, potentially disclosing sensitive information from other parts of the software in the...

5.3CVSS5.5AI score0.00575EPSS
SaveExploits0References5
NVD
NVD
•added 2024/04/15 8:15 p.m.•33 views

CVE-2024-32036

ImageSharp is a 2D graphics API. A data leakage flaw was found in ImageSharp's JPEG and TGA decoders. This vulnerability is triggered when an attacker passes a specially crafted JPEG or TGA image file to a software using ImageSharp, potentially disclosing sensitive information from other parts of...

6.5CVSS5.1AI score0.00575EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/04/15 8:08 p.m.•32 views

CVE-2024-32036 SixLabors.ImageSharp vulnerable to data leakage

ImageSharp is a 2D graphics API. A data leakage flaw was found in ImageSharp's JPEG and TGA decoders. This vulnerability is triggered when an attacker passes a specially crafted JPEG or TGA image file to a software using ImageSharp, potentially disclosing sensitive information from other parts of...

5.3CVSS6.1AI score
SaveExploits0References5
Mend
Mend
•added 2024/04/15 8:08 p.m.•7 views

CVE-2024-32036

ImageSharp is a 2D graphics API. A data leakage flaw was found in ImageSharp's JPEG and TGA decoders. This vulnerability is triggered when an attacker passes a specially crafted JPEG or TGA image file to a software using ImageSharp, potentially disclosing sensitive information from other parts of...

6.5CVSS0.00575EPSS
SaveExploits0References6
CVE
CVE
•added 2024/04/15 8:08 p.m.•140 views

CVE-2024-32036

SixLabors.ImageSharp (JPEG and TGA decoders) contains a data leakage flaw in which specially crafted JPEG/TGA images can disclose sensitive information from other parts of the software in the image buffer. Root cause is described as a heap-release-after-reuse issue in the decoders, enabling infor...

6.5CVSS6.1AI score0.00575EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/04/15 8:08 p.m.•35 views

CVE-2024-32036 SixLabors.ImageSharp vulnerable to data leakage

ImageSharp is a 2D graphics API. A data leakage flaw was found in ImageSharp's JPEG and TGA decoders. This vulnerability is triggered when an attacker passes a specially crafted JPEG or TGA image file to a software using ImageSharp, potentially disclosing sensitive information from other parts of...

5.3CVSS5.3AI score0.00575EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/04/15 8:08 p.m.•13 views

CVE-2024-32036 SixLabors.ImageSharp vulnerable to data leakage

ImageSharp is a 2D graphics API. A data leakage flaw was found in ImageSharp's JPEG and TGA decoders. This vulnerability is triggered when an attacker passes a specially crafted JPEG or TGA image file to a software using ImageSharp, potentially disclosing sensitive information from other parts of...

5.3CVSS5.1AI score0.00575EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/15 12:00 a.m.•10 views

CVE-2024-32036: Sensitive Information in Resource Not Removed Before Reuse

ImageSharp is a 2D graphics API. A data leakage flaw was found in ImageSharp's JPEG and TGA decoders. This vulnerability is triggered when an attacker passes a specially crafted JPEG or TGA image file to a software using ImageSharp, potentially disclosing sensitive information from other parts of...

6.5CVSS5.6AI score0.00575EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/04/05 12:00 a.m.•15 views

NVIDIA nvJPEG2000 security vulnerability

NVIDIA nvJPEG2000 is a library from NVIDIA, Inc. for decoding and encoding JPEG2000 images on NVIDIA GPUs. A security vulnerability exists in NVIDIA nvJPEG2000 that originates from incorrect input validation, resulting in a denial of service on the system...

2.8CVSS6.6AI score0.00166EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/01 12:00 a.m.•20 views

Kofax Power PDF buffer error vulnerability

Kofax Power PDF is a professional PDF editing and management software from Kofax. Kofax Power PDF suffers from a buffer error vulnerability that originates from an out-of-bounds read vulnerability in the parsing of JPG files. An attacker can exploit this vulnerability to disclose sensitive...

5.5CVSS4.4AI score0.00385EPSS
SaveExploits0References2
Fedora
Fedora
•added 2024/03/23 12:50 a.m.•23 views

[SECURITY] Fedora 40 Update: freeimage-3.19.0-0.23.svn1909.fc40

FreeImage is a library for developers who would like to support popular graphics image formats like PNG, BMP, JPEG, TIFF and others as needed by today's multimedia applications...

6.5CVSS6.5AI score0.00883EPSS
SaveExploits1
CNNVD
CNNVD
•added 2024/03/22 12:00 a.m.•18 views

jhead security vulnerabilities

jhead is a tool for modifying information in JPEG files. A security vulnerability exists in Matthias-Wandel jhead version 3.08. An attacker could exploit the vulnerability to cause a heap-based buffer overflow...

7.5CVSS6.4AI score0.00734EPSS
SaveExploits0References5
CNVD
CNVD
•added 2024/03/22 12:00 a.m.•23 views

FreeImage buffer overflow vulnerability (CNVD-2025-10043)

FreeImage is a cross-platform open source library for supporting popular graphic image formats. FreeImage suffers from a buffer overflow vulnerability that stems from the program failing to correctly validate the length and size of the input data, which can be exploited by an attacker to cause a...

6.2CVSS7.5AI score0.00281EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/03/20 6:15 a.m.•26 views

CVE-2024-28577

Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the jpegreadexifprofileraw function when reading images in JPEG format...

5.5CVSS5.3AI score
SaveExploits0References1
osv_debian
osv_debian
•added 2024/03/20 6:15 a.m.•15 views

DEBIAN-CVE-2024-28577

Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the jpegreadexifprofileraw function when reading images in JPEG format...

5.5CVSS5.2AI score0.00286EPSS
SaveExploits1References1
Rows per page
Query Builder