[SECURITY] Fedora 39 Update: ImageMagick-7.1.1.26-2.fc39

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

Fedora: Security Advisory (FEDORA-2024-6f8c1d9005)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-48356

In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the jpg driver. The vulnerability could lead to the disclosure of local information that requires system execution privileges...

simd:simd_load_fuzzer: Global-buffer-overflow in Simd::Base::jpeg__jpeg_decode_block_prog_dc

Detailed Report: https://oss-fuzz.com/testcase?key=5377312904249344 Project: simd Fuzzing Engine: libFuzzer Fuzz Target: simdloadfuzzer Job Type: libfuzzerasansimd Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000010dc0d40 Crash State:...

SUSE CVE-2023-47996

An integer overflow vulnerability in Exif.cpp::jpegreadexifdir in FreeImage 3.18.0 allows attackers to obtain information and cause a denial of service...

DEBIAN-CVE-2023-47996

An integer overflow vulnerability in Exif.cpp::jpegreadexifdir in FreeImage 3.18.0 allows attackers to obtain information and cause a denial of service...

PT-2024-13536 · Freeimage +1 · Freeimage +1

Name of the Vulnerable Software and Affected Versions: FreeImage version 3.18.0 Description: An integer overflow vulnerability in Exif.cpp::jpeg read exif dir allows attackers to obtain information and cause a denial of service. Recommendations: For FreeImage version 3.18.0, consider disabling th...

OESA-2024-1023 metadata-extractor2 security update

Metadata Extractor is a straightforward Java library for reading metadata from image files. Security Fixes: metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a...

OESA-2024-1025 metadata-extractor2 security update

Metadata Extractor is a straightforward Java library for reading metadata from image files. Security Fixes: metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a...

NewStart CGSL MAIN 6.06 : mokutil Multiple Vulnerabilities (NS-SA-2023-0080)

The remote NewStart CGSL host, running version MAIN 6.06, has mokutil packages installed that are affected by multiple vulnerabilities: - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption o...

Adobe Illustrator Use-After-Free

The vulnerability of Adobe Illustrator’s graphic editor is related to the use of memory after it is freed during the processing of JP2 format files. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created…...

Adobe Illustrator Buffer Overflow

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer in memory when processing JP2 format files. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created file...

PT-2023-9551

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free bug in the Linux kernel's mtk-jpeg component, specifically due to error path handling in mtk jpeg dec device run. This bug can be triggered in tw...

openSUSE 15 Security Update : jhead (openSUSE-SU-2023:0371-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0371-1 advisory. - Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in ff_jpegxl_parse_codestream_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6151006496620544 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

[SECURITY] Fedora 39 Update: freeimage-3.19.0-0.20.svn1909.fc39

FreeImage is a library for developers who would like to support popular graphics image formats like PNG, BMP, JPEG, TIFF and others as needed by today's multimedia applications...

Oracle Linux 7 : grub2 (ELSA-2023-12952)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12952 advisory. - Add CVE-2022-28736 to the list JIRA: OLDIS-16371 - Fix: CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Stack-buffer-overflow in read_distribution_bundle

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5967000670961664 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

Fedora: Security Advisory for freeimage (FEDORA-2023-604a7d56b0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...