PT-2022-26056 · Jhead +3 · Jhead +3

Name of the Vulnerable Software and Affected Versions: Jhead version 3.06.0.1 Description: The issue allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option. Recommendations: For Jhead version 3.06.0.1, consider avoiding t...

CVE-2022-41751

Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option...

ffmpeg:ffmpeg_AV_CODEC_ID_TIFF_fuzzer: Heap-buffer-overflow in dng_decode_jpeg

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4849108968144896 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTIFFfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

Ubuntu 20.04 LTS : gThumb vulnerabilities (USN-5680-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5680-1 advisory. It was discovered that gThumb did not properly managed memory when processing certain image files. If a user were tricked into opening a specially crafte...

CVE-2022-2984

In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel...

USN-5681-1: gThumb vulnerabilities

It was discovered that gThumb did not properly managed memory under certain circumstances. An attacker could possibly use this issue to cause gThumb to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2018-18718 It was discovered that gThumb did not properly manage...

USN-5681-1 gThumb vulnerabilities

It was discovered that gThumb did not properly managed memory under certain circumstances. An attacker could possibly use this issue to cause gThumb to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2018-18718 It was discovered that gThumb did not properly manage...

USN-5680-1: gThumb vulnerabilities

It was discovered that gThumb did not properly managed memory when processing certain image files. If a user were tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to cause gThumb to crash, resulting in a denial of service, or possibly execute arbitrary...

USN-5680-1 gThumb vulnerabilities

It was discovered that gThumb did not properly managed memory when processing certain image files. If a user were tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to cause gThumb to crash, resulting in a denial of service, or possibly execute arbitrary...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from the American company Google. A security vulnerability exists in Google Android 10, Android 11, and Android 12, which stems from a lack of boundary checking in the jpg driver, which may allow out-of-bounds writes...

JasPer 安全漏洞

JasPer is a C-based tool for image processing from the individual developer Michael Adams. The software supports the JPEG-2000 format as defined in ISO/IEC 15444-1 and is primarily used for image encoding and processing. A security vulnerability exists in JasPer, which stems from the discovery of...

OPENSUSE-SU-2022:10144-1 Security update for gdcm, orthanc, orthanc-gdcm, orthanc-webviewer

This update for gdcm, orthanc, orthanc-gdcm, orthanc-webviewer fixes the following issues: Changes in gdcm: - Provides/obsoletes moved to lbgdcm-package Thx DimStar - rename of gdcm-libgdcm30 to libgdcm30 proposal S. Br�ns - version 3.0.18 no changelog - version 3.0.12 support for poppler 22.03...

CVE-2022-33889

A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution...

CVE-2022-33889

A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution...

CVE-2022-33889

A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution...

CVE-2022-33889

CVE-2022-33889 affects Autodesk Design Review 2018 and AutoCAD 2022–2023. The issue is a heap-buffer overflow when parsing malicious GIF/JPEG files, enabling arbitrary code execution. The Red Hat/NVD entries and security bulletins reference the same vulnerability across products; Autodesk advisor...

CVE-2022-33889: Out-of-bounds Write

A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution...

PT-2022-21890 · Autodesk · Autocad +1

Name of the Vulnerable Software and Affected Versions: Autodesk Design Review version 2018 AutoCAD versions 2022 through 2023 Description: A maliciously crafted GIF or JPEG file can be used to write beyond the allocated heap buffer when parsed through the affected software, potentially leading to...

PT-2022-37832

Уязвимость функции print wrapper info модуля drivers/media/platform/nxp/imx-jpeg/mxc-jpeg-hw.c драйвера мультимедийных устройств ядра операционной системы Linux связана с неправильным отключением или освобождением ресурса. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо,...

GLSA-202209-12 : GRUB: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202209-12 GRUB: Multiple Vulnerabilities - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code...