CVE-2020-23567

Irfanview v4.53 allows attackers to to cause a denial of service DoS via a crafted JPEG 2000 file. Related to "Integer Divide By Zero starting at JPEG2000!ShowPlugInSaveOptionsW+0x00000000000082ea"...

Design/Logic Flaw

Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a "Data from Faulting Address controls Branch Selection starting at JPEG2000!ShowPlugInSaveOptionsW+0x0000000000032850"...

Integer overflow

Irfanview v4.53 allows attackers to to cause a denial of service DoS via a crafted JPEG 2000 file. Related to "Integer Divide By Zero starting at JPEG2000!ShowPlugInSaveOptionsW+0x00000000000082ea"...

CVE-2020-23567

CVE-2020-23567 affects IrfanView 4.53. The vulnerability allows a DoS via a crafted JPEG 2000 file, related to an Integer Divide By Zero starting at JPEG2000!ShowPlugInSaveOptions_W+0x00000000000082ea. Multiple connected sources (Red Hat, CNVD, CNNVD, CNVD-2021) confirm the issue and provide the ...

CVE-2020-23565

Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a "Data from Faulting Address controls Branch Selection starting at JPEG2000!ShowPlugInSaveOptionsW+0x0000000000032850"...

CVE-2020-23565

CVE-2020-23565 affects IrfanView v4.53, where a crafted JPEG 2000 file can lead to arbitrary code execution. Public sources describe the vulnerability as related to a faulting address that controls branch selection starting at JPEG2000!ShowPlugInSaveOptions_W+0x0000000000032850, indicating a memo...

CVE-2020-23565: Undefined Security Weakness

Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a "Data from Faulting Address controls Branch Selection starting at JPEG2000!ShowPlugInSaveOptionsW+0x0000000000032850"...

Irfanview 安全漏洞

IrfanView is very fast, small, compact and innovative free graphic viewer for Windows 9x, ME, NT, 2000, XP, 2003, 2008, Vista, Windows 7, Windows 8, Windows 10. An infinite loop vulnerability exists in Irfanview version 4.53. An attacker can exploit this vulnerability to cause a denial of service...

PT-2021-10912

Name of the Vulnerable Software and Affected Versions Irfanview version 4.53 Description The issue allows attackers to execute arbitrary code via a crafted JPEG 2000 file. It is related to a "Data from Faulting Address controls Branch Selection starting at JPEG2000!ShowPlugInSaveOptions...

Irfanview 数字错误漏洞

IrfanView is a very fast, small, compact and innovative free graphics viewer for Windows 9x, ME, NT, 2000, XP, 2003, 2008, Vista, Windows 7, Windows 8, Windows 10. Irfanview version 4.53 is vulnerable to a denial of service. An attacker can exploit this vulnerability via specially crafted JPEG 20...

CVE-2020-23567: Divide By Zero

Irfanview v4.53 allows attackers to to cause a denial of service DoS via a crafted JPEG 2000 file. Related to "Integer Divide By Zero starting at JPEG2000!ShowPlugInSaveOptionsW+0x00000000000082ea"...

PT-2021-10914

Name of the Vulnerable Software and Affected Versions Irfanview version 4.53 Description The issue allows attackers to cause a denial of service DoS via a crafted JPEG 2000 file. It is related to an "Integer Divide By Zero" error starting at JPEG2000!ShowPlugInSaveOptions W+0x00000000000082ea...

stb:stbi_read_fuzzer: Heap-buffer-overflow in stbi__jpeg_decode_block

Detailed Report: https://oss-fuzz.com/testcase?key=5692161711013888 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzerasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x629000047208 Crash State: stbijpegdecodeblock...

CVE-2021-22563

Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other process memory. It is recommended to upgrade past 0.6.0 or patch with...

CVE-2021-22564

For certain valid JPEG XL images with a size slightly larger than an integer number of groups 256x256 pixels when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in the heap to another. This copy can occur when processing the...

CVE-2021-22563

Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other process memory. It is recommended to upgrade past 0.6.0 or patch with...

Design/Logic Flaw

Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other process memory. It is recommended to upgrade past 0.6.0 or patch with...

Design/Logic Flaw

For certain valid JPEG XL images with a size slightly larger than an integer number of groups 256x256 pixels when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in the heap to another. This copy can occur when processing the...

CVE-2021-22564

The CVE-2021-22564 issue affects the libjxl JPEG XL decoder. It describes an out-of-bounds copy of image pixels from a heap buffer when processing image groups out of order (edges of images like right or bottom). The vulnerability can occur in multi‑threaded decoding environments where groups are...

CVE-2021-22564

For certain valid JPEG XL images with a size slightly larger than an integer number of groups 256x256 pixels when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in the heap to another. This copy can occur when processing the...