7199 matches found
GSD-2022-1001464 media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers
media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...
GSD-2022-1001456 media: imx-jpeg: fix a bug of accessing array out of bounds
media: imx-jpeg: fix a bug of accessing array out of bounds This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...
GSD-2022-1001141 media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers
media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...
GSD-2022-1001133 media: imx-jpeg: fix a bug of accessing array out of bounds
media: imx-jpeg: fix a bug of accessing array out of bounds This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...
PT-2022-30053
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A bug in the imx-jpeg media module allows for accessing an array out of bounds. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-29729
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A bug in the imx-jpeg media module allows for accessing an array out of bounds. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-29737
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.16.19 Description The issue concerns the decoding of NV12M jpegs into single-planar buffers. It is related to the imx-jpeg media component. The actual impact and attack plausibility have not yet been proven...
PT-2022-30059
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue concerns the decoding of NV12M jpegs into single-planar buffers in the media: imx-jpeg component. The actual impact and attack plausibility have not yet been proven. Recommendations...
PT-2022-29406
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A bug in the imx-jpeg media module allows for accessing an array out of bounds. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-29414
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue concerns the decoding of NV12M jpegs into single-planar buffers. It is related to the imx-jpeg media component. The actual impact and potential for attack have not been proven yet...
CVE-2022-24106
In Xpdf prior to 4.04, the DCT JPEG decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc...
serenity:FuzzJPGLoader: Bad-cast to AK::Array<AK::TypeErasedParameter, 0>Gfx::read_start_of_scan in Gfx::decode_jpg
Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=4693527059103744 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzJPGLoader Job Type: libfuzzerubsanserenity Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7fff74e270c8 Cra...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the stbijpegdecodeblockprogdc function. Remediation There is no fixed version for stb. References - GitHub Issue - GitHub PR Credit: Pietro Borrello...
Incorrect Bitwise Shift of Integer
Overview Affected versions of this package are vulnerable to Incorrect Bitwise Shift of Integer in the stbijpegdecodeblockprogac function. Remediation There is no fixed version for stb. References - GitHub Issue - GitHub PR...
Exploit for Code Injection in Exiftool_Project Exiftool
Exploit for CVE-2021-22204 ExifTool - Arbitrary Code Executi...
DEBIAN-CVE-2022-28041
stbimage.h v2.27 was discovered to contain an integer overflow via the function stbijpegdecodeblockprogdc. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...
DEBIAN-CVE-2022-28042
stbimage.h v2.27 was discovered to contain an heap-based use-after-free via the function stbijpeghuffdecode...
CVE-2022-28048
STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...