7199 matches found
libvips:mosaic_fuzzer: Crash in decompress_smooth_data
Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5152537663111168 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: mosaicfuzzer Job Type: libfuzzerubsanlibvips Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000100000003 Crash...
libvips:webpsave_buffer_fuzzer: Heap-use-after-free in read_markers
Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=4598791421952000 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: webpsavebufferfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...
Fedora: Security Advisory for openjpeg2 (FEDORA-2022-9515529c96)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: openjpeg2-2.4.0-5.fc35
The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profile-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multiple...
Fedora: Security Advisory for openjpeg2 (FEDORA-2022-6746739d52)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 36 Update: openjpeg2-2.4.0-7.fc36
The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profile-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multiple...
UBUNTU-CVE-2021-28278
A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c...
jhead 缓冲区错误漏洞
jhead is a tool for modifying JPEG file information. A buffer error vulnerability exists in jhead version 3.04 and jpgfile.c version 3.05, which stems from a heap-based buffer overflow vulnerability in the RemoveSectionType function in jpgfile.c. The vulnerability is caused by a heap-based buffer...
ALPINE-CVE-2021-42719
Adobe Bridge version 11.1.1 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted .jpe file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...
ffjpeg 代码问题漏洞
ffjpeg is a JPEG encoder/decoder. ffjpeg suffers from a null pointer dereference vulnerability, for which no detailed vulnerability details are currently available...
UBUNTU-CVE-2021-3575
A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420torgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg...
ok-file-formats buffer overflow vulnerability (CNVD-2022-19495)
ok-file-formats is an open source decoder for PNG, JPEG, WAV and several other file formats. ok-file-formats suffers from a buffer overflow vulnerability, which stems from a heap buffer overflow that occurs when using functions of the ok-file-formats project in /okpng.c:533 in the function okpng...
ok-file-formats buffer overflow vulnerability (CNVD-2022-19500)
ok-file-formats is an open source decoder for PNG, JPEG, WAV and several other file formats. ok-file-formats suffers from a buffer overflow vulnerability that stems from a heap buffer overflow in the function "/okpng.c" when using functions from the ok-file-formats project. function okpngreaddata...
CVE-2021-23191
A security issue was found in htmldoc v1.9.12 and before. A NULL pointer dereference in the function imageloadjpeg in image.cxx may result in denial of service...
CVE-2021-44334
David Brackeen ok-file-formats 97f78ca is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurs in function okjpgconvertYCbCrtoRGB in "/okjpg.c:513"...
ok-file-formats 缓冲区错误漏洞
ok-file-formats is an open source decoder for PNG, JPEG, WAV, and several other file formats. A buffer error vulnerability exists in the dev version of ok-file-formats, which stems from a heap buffer overflow in the function okjpggeneratehuffmantable in "/ok jpg.c:403" when using functions from t...
CVE-2022-24614
When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...
CVE-2022-24613
metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...
GHSA-4V6P-CXF9-98RF Allocation of Resources Without Limits or Throttling in metadata-extractor
When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...
GHSA-P5PG-WM9Q-8V6R Improper Handling of Exceptional Conditions inn metadata-extractor
metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...