Lucene search
+L

7155 matches found

OSS-Fuzz
OSS-Fuzz
•added 2021/04/16 9:48 p.m.•6 views

imagemagick:ping_pict_fuzzer: Heap-buffer-overflow in decode_mcu

Detailed Report: https://oss-fuzz.com/testcase?key=6728228443127808 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingpictfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf0d02edf Crash State: decodemcu...

5.9AI score
SaveExploits0
Veracode
Veracode
•added 2021/04/15 1:57 a.m.•24 views

Denial Of Service (DoS)

libexif is vulnerable to denial of service DoS. An attacker is able to upload a malicious JPEG file to cause a NULL Pointer Deference in the "actions.c", leading to an application crash...

5.5CVSS3.8AI score0.01268EPSS
SaveExploits1References10Affected Software3
CNVD
CNVD
•added 2021/04/15 12:00 a.m.•31 views

Exif Null Pointer Dereference Vulnerability

Exif is a small command line utility to display EXIF information hidden in JPEG files. A null pointer dereference vulnerability exists in the "actions.c" file in Exif 0.6.22 and earlier. An attacker can exploit this vulnerability by uploading a malicious JPEG file that will crash the application...

5.5CVSS6.3AI score0.01268EPSS
SaveExploits1References1
OSV
OSV
•added 2021/04/14 2:15 p.m.•22 views

CVE-2021-27815

NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service DoS by uploading a malicious JPEG file, causing the application to crash...

5.5CVSS6.7AI score
SaveExploits0References7
NVD
NVD
•added 2021/04/14 2:15 p.m.•21 views

CVE-2021-27815

NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service DoS by uploading a malicious JPEG file, causing the application to crash...

5.5CVSS0.01268EPSS
SaveExploits1References7
OSV
OSV
•added 2021/04/14 2:15 p.m.•5 views

DEBIAN-CVE-2021-27815

NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service DoS by uploading a malicious JPEG file, causing the application to crash...

5.5CVSS6.9AI score0.01268EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2021/04/14 2:15 p.m.•31 views

CVE-2021-27815

NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service DoS by uploading a malicious JPEG file, causing the application to crash...

5.5CVSS6.1AI score0.01268EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/04/14 2:15 p.m.•15 views

CVE-2021-27815

NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service DoS by uploading a malicious JPEG file, causing the application to crash...

5.5CVSS5.6AI score0.01268EPSS
SaveExploits1References11
Prion
Prion
•added 2021/04/14 2:15 p.m.•19 views

Null pointer dereference

NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service DoS by uploading a malicious JPEG file, causing the application to crash...

4.3CVSS5.4AI score0.01268EPSS
SaveExploits1References7Affected Software2
OSV
OSV
•added 2021/04/14 2:15 p.m.•19 views

UBUNTU-CVE-2021-27815

NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service DoS by uploading a malicious JPEG file, causing the application to crash...

5.5CVSS6.1AI score0.01268EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/14 12:00 a.m.•6 views

CVE-2021-27815: NULL Pointer Dereference

NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service DoS by uploading a malicious JPEG file, causing the application to crash...

5.5CVSS5.8AI score0.01268EPSS
SaveExploits1References2
Mend
Mend
•added 2021/04/14 12:00 a.m.•2 views

CVE-2021-27815

NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service DoS by uploading a malicious JPEG file, causing the application to crash...

6.8CVSS0.01268EPSS
SaveExploits1References12
Cvelist
Cvelist
•added 2021/04/14 12:00 a.m.•57 views

CVE-2021-27815

NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service DoS by uploading a malicious JPEG file, causing the application to crash...

5.7AI score0.01268EPSS
SaveExploits1References7
CVE
CVE
•added 2021/04/14 12:00 a.m.•99 views

CVE-2021-27815

CVE-2021-27815 affects the exif tool (libexif) up to and including version 0.6.22. The vulnerability is a NULL pointer dereference in the XML output path, allowing a crafted JPEG to crash the application (Denial of Service). Affected products cite exif v0.6.22 and earlier. Exploitation involves u...

5.5CVSS5.3AI score0.01268EPSS
SaveExploits1References7Affected Software1
Debian CVE
Debian CVE
•added 2021/04/14 12:00 a.m.•70 views

CVE-2021-27815

NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service DoS by uploading a malicious JPEG file, causing the application to crash...

5.5CVSS5.4AI score0.01268EPSS
SaveExploits1
attackerkb
attackerkb
•added 2021/04/13 7:15 p.m.•9 views

CVE-2021-21784

An out-of-bounds write vulnerability exists in the JPG format SOF marker processing of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS7.1AI score0.00807EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/04/13 12:00 a.m.•20 views

PT-2021-14769 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.8 Description: An out-of-bounds write issue exists in the JPG format SOF marker processing. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger th...

9.8CVSS8.7AI score0.00807EPSS
SaveExploits1References2
OSV
OSV
•added 2021/04/08 11:15 p.m.•12 views

AZL-7217 CVE-2021-3482 affecting package exiv2 for versions less than 0.27.5-1

A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data...

6.5CVSS6.7AI score0.02295EPSS
SaveExploits0References1
OSS-Fuzz
OSS-Fuzz
•added 2021/04/06 6:42 p.m.•34 views

libjpeg-turbo:compress_fuzzer: Use-of-uninitialized-value in rgb_ycc_convert

Project: https://github.com/libjpeg-turbo/libjpeg-turbo.git Detailed Report: https://oss-fuzz.com/testcase?key=5990737683546112 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: compressfuzzer Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-val...

5.9AI score
SaveExploits0
CNNVD
CNNVD
•added 2021/04/05 12:00 a.m.•8 views

Exiv2 缓冲区错误漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. Exiv2 suffers from a heap buffer overflow vulnerability. The vulnerability stems from improper validation of input to the rawData.size property in Jp2Image::readMetadata in jp2image.cpp. An attacker could...

6.5CVSS7AI score0.02295EPSS
SaveExploits0References15
Rows per page
Query Builder