An Update For Exempi Is Now Available For Red Hat Enterprise Linux 7. Red Hat Product Security Has Rated This Update As Having A Security Impact Of Low. A Common Vulnerability Scoring System (CVSS) Base Score, Which Gives A Det...(exceeded 255 Characters)

exempi is vulnerable to denial of service DoS. The vulnerability exists through a use after free issue via a PDF file containing JPEG data...

exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service

There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

libjpeg: "cjpeg" utility large loop because read_pixel in rdtarga.c mishandles EOF

libjpeg 9c has a large loop because readpixel in rdtarga.c mishandles EOF...

Moderate: Red Hat Security Advisory: libjpeg-turbo security update

An update for libjpeg-turbo is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2019-13960

In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of service, is that the...

CVE-2019-13655

Imgix through 2019-06-19 allows remote attackers to cause a denial of service resource consumption by manipulating a small JPEG file to specify dimensions of 64250x64250 pixels, which is mishandled during an attempt to load the 'whole image' into memory...

CVE-2019-13655

Imgix through 2019-06-19 allows remote attackers to cause a denial of service resource consumption by manipulating a small JPEG file to specify dimensions of 64250x64250 pixels, which is mishandled during an attempt to load the 'whole image' into memory...

Design/Logic Flaw

Imgix through 2019-06-19 allows remote attackers to cause a denial of service resource consumption by manipulating a small JPEG file to specify dimensions of 64250x64250 pixels, which is mishandled during an attempt to load the 'whole image' into memory...

CVE-2019-13655

Imgix through 2019-06-19 allows remote attackers to cause a denial of service resource consumption by manipulating a small JPEG file to specify dimensions of 64250x64250 pixels, which is mishandled during an attempt to load the 'whole image' into memory...

CVE-2019-13655

CVE-2019-13655 affects Imgix real-time image processing up to 2019-06-19. A small JPEG can be crafted to specify dimensions of 64250x64250, which is mishandled when loading the ‘whole image’ into memory, causing a denial of service via resource consumption. The description indicates a remote atta...

PT-2019-13463

Name of the Vulnerable Software and Affected Versions Imgix through 2019-06-19 Description The issue allows remote attackers to cause a denial of service by manipulating a small JPEG file to specify large dimensions, which is mishandled during an attempt to load the image into memory...

CVE-2019-13655: Uncontrolled Resource Consumption

Imgix through 2019-06-19 allows remote attackers to cause a denial of service resource consumption by manipulating a small JPEG file to specify dimensions of 64250x64250 pixels, which is mishandled during an attempt to load the 'whole image' into memory...

Rare Steganography Hack Can Compromise Fully Patched Websites

An unusual steganographic technique that an attacker can use to implant a malicious webshell on unsuspecting websites has been spotted in Latin America. According to research from Trustwave shared exclusively with Threatpost, a forensic investigation showed that an adversary is implanting PHP cod...

CVE-2019-2345

CVE-2019-2345 describes a race condition when accessing the DMA buffer in the JPEG driver across Snapdragon platforms (Auto, Connectivity, consumer IoT, industrial IoT, Mobile, Wearables). The issue affects numerous SDM/SoC lines (e.g., MSM8909W, MSM8996AU, QCS605, SD 425–SD 827/SD 835–SD 850, SD...

PT-2019-16406

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions in MSM8909W, MSM8996AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM660, SDX20, SDX24 Description A race condition...

CVE-2019-2345: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition while accessing DMA buffer in jpeg driver in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8909W, MSM8996AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710...

libjpeg-turbo Denial of Service Vulnerability

libjpeg is a C language library for processing image data in JPEG format. The product includes JPEG decoding, JPEG encoding and other JPEG functions. libjpeg-turbo is an optimized and improved version of libjpeg. A security vulnerability exists in libjpeg-turbo version 2.0.2. An attacker could...

Design/Logic Flaw

DISPUTED In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of service, is...

CVE-2019-13960

CVE-2019-13960 affects libjpeg-turbo 2.0.2, where processing an invalid progressive JPEG with incorrect width/height can cause excessive memory usage. The issue is described as a potential denial of service depending on how an application handles libjpeg warnings (advised to treat them as fatal o...

CVE-2019-13960

In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of service, is that the...