simd:simd_load_fuzzer: Heap-use-after-free in Simd::Base::ImageJpegLoader::FromStream

Detailed Report: https://oss-fuzz.com/testcase?key=6287482038648832 Project: simd Fuzzing Engine: libFuzzer Fuzz Target: simdloadfuzzer Job Type: libfuzzerasansimd Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6290027bf80c Crash State:...

PT-2021-7967 · Unknown +2 · Stb Image.H +2

Name of the Vulnerable Software and Affected Versions: stb image.h version 2.27 Description: The issue is related to a heap-based buffer overflow in the stbi jpeg load function of the stb image.h library, which can lead to Information Disclosure or Denial of Service. This can be exploited by a...

EulerOS Virtualization 3.0.2.2 : libjpeg-turbo (EulerOS-SA-2021-2144)

According to the version of the libjpeg-turbo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The libjpeg-turbo package contains a library of functions for manipulatingJPEG images.Security Fixes:libjpeg-turbo 1.5.2 has a...

gThumb Denial of Service Vulnerability

gThumb is a versatile image viewing tool that can manage, edit, and view images. gThumb versions prior to 3.10.1 are vulnerable to a denial of service. An attacker could exploit this vulnerability to crash the program via malformed JPEG images...

DEBIAN-CVE-2020-36427

GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image...

CVE-2020-36427

GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image...

CVE-2020-36427

GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image...

CVE-2020-36427

GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image...

Design/Logic Flaw

GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image...

CVE-2020-36427

GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image...

CVE-2020-36427

GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image...

CVE-2020-36427

CVE-2020-36427 affects GNOME gThumb prior to version 3.10.1. A malformed JPEG image can trigger an application crash (DoS) in gThumb, as described in multiple sources (e.g., OSV references and vendor advisories). The known public statement: vulnerable component is gThumb’s JPEG handling; root cau...

CVE-2020-36427

GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image...

CVE-2020-36427: Undefined Security Weakness

GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image...

JasPer numeric error vulnerability

JasPer is a C-based tool for image processing from Michael Adams' personal developer. The software supports the JPEG-2000 format as defined in ISO / IEC 15444-1 and is primarily used for image encoding and processing. A divide by zero vulnerability exists. No detailed vulnerability details are...

ffjpeg buffer overflow vulnerability (CNVD-2022-06523)

ffjpeg is a simple implementation of jpeg encoding and decoding. ffjpeg 2020-06-22 and earlier versions of jfif.c:701 have a global buffer overflow vulnerability in jfifencode. An attacker could exploit the vulnerability to cause a denial of service via a specially crafted jpeg file...

CVE-2020-23707

A heap-based buffer overflow vulnerability in the function okjpgdecodeblockprogressive at okjpg.c:1054 of ok-file-formats through 2020-06-26 allows attackers to cause a Denial of Service DOS via a crafted jpeg file...

CVE-2020-23705

A global buffer overflow vulnerability in jfifencode at jfif.c:701 of ffjpeg through 2020-06-22 allows attackers to cause a Denial of Service DOS via a crafted jpeg file...

CVE-2020-23706

A heap-based buffer overflow vulnerability in the function okjpgdecodeblocksubsequentscan okjpg.c:1102 of ok-file-formats through 2020-06-26 allows attackers to cause a Denial of Service DOS via a crafted jpeg file...

CVE-2020-23707

A heap-based buffer overflow vulnerability in the function okjpgdecodeblockprogressive at okjpg.c:1054 of ok-file-formats through 2020-06-26 allows attackers to cause a Denial of Service DOS via a crafted jpeg file...