Heap overflow

jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coefforder.cc ReadPermutation. When decoding a malicous jxl file using djxl, an attacker can trigger arbitrary code execution or a denial of service...

CVE-2021-28026

CVE-2021-28026 affects jpeg-xl v0.3.2; a heap buffer overflow in /lib/jxl/coeff_order.cc ReadPermutation can be triggered when decoding a malicious JXL file with djxl, enabling arbitrary code execution or a denial of service. The connected sources corroborate the vulnerability; no patch/version r...

CVE-2021-28026

jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coefforder.cc ReadPermutation. When decoding a malicous jxl file using djxl, an attacker can trigger arbitrary code execution or a denial of service...

CVE-2021-28026

jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coefforder.cc ReadPermutation. When decoding a malicous jxl file using djxl, an attacker can trigger arbitrary code execution or a denial of service...

OESA-2021-1061 openjpeg security update

Security Fixes: Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file because of incorrect j2kdecode, j2kreadeoc, and tcddecodetile...

jpeg-xl 缓冲区错误漏洞

JPEG aka jpeg-xl is JPEG open source an application. Provides image delivery on the Web and professional photography needs. jpeg-xl v0.3.2 suffers from a buffer error vulnerability that originates from a heap buffer overflow. An attacker could exploit this vulnerability to trigger arbitrary code...

FreeBSD : jasper -- multiple vulnerabilities (3a469cbc-7a66-11eb-bd3f-08002728f74c)

JasPer Releases : - Fix memory-related bugs in the JPEG-2000 codec resulting from attempting to decode invalid code streams. 264, 265 This fix is associated with CVE-2021-26926 and CVE-2021-26927. - Fix wrong return value under some compilers 260 - Fix CVE-2021-3272 heap buffer overflow in...

jpeg-xl 0.3.1 Memory Corruption Vulnerability

Multiple Vulnerabilities in jpeg-xl =================================== CVE: CVE-2021-27804 Highest Severity Rating: High Confirmed Affected Versions: jpeg-xl v0.3.1 and earlier Vendor: Joint Photographic Experts Group JPEG Vendor URL: https://gitlab.com/wg1/jpeg-xl Summary and Impact...

CVE-2021-27804

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

CVE-2021-27804

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

Memory corruption

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

CVE-2021-27804

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

CVE-2021-27804

CVE-2021-27804 involves the JPEG XL project (jpeg-xl) with versions up to 0.3.2, where writable memory corruption is reported. The provided documents identify the affected software and the memory-corruption impact but do not disclose a detailed root cause in those entries. The interconnected Red ...

CVE-2021-27804

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

CVE-2021-27804

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

MediaTek jpeg Buffer Overflow Vulnerability

MediaTek jpeg is an application chip from MediaTek China. It provides optimized image processing. MediaTek jpeg suffers from a buffer overflow vulnerability that originates from incorrect input validation and can be exploited by an attacker to write out-of-bounds...

Updated pix packages fix a security vulnerability

A heap-based buffer overflow in cairoimagesurfacecreatefromjpeg in extensions/cairoio/cairo-image-surface-jpeg.c in Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file CVE-2019-20326...

MGASA-2021-0090 Updated pix packages fix a security vulnerability

A heap-based buffer overflow in cairoimagesurfacecreatefromjpeg in extensions/cairoio/cairo-image-surface-jpeg.c in Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file CVE-2019-20326...

CVE-2021-0402

In jpeg, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05433311...

CVE-2021-0402

In jpeg, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05433311...