lcms:cms_transform_all_fuzzer: Use-of-uninitialized-value in _LUTeval16

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=6111858918817792 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmstransformallfuzzer Job Type: libfuzzermsanlcms Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

PT-2025-49617

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the qcom cpufreq hw read lut function within the cpufreq Qualcomm hardware component. This occurs when the cpu dev fails to obtain the operating performance table...

Malicious code in lut-eljment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c822930961643b788c41976c4f2c4fea22d0d3f7127b89b3887d69beac330b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4425 Malicious code in lut-eljment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c822930961643b788c41976c4f2c4fea22d0d3f7127b89b3887d69beac330b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

lut-ab.com Cross Site Scripting vulnerability OBB-2522510

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lcms:cms_overwrite_transform_fuzzer: Index-out-of-bounds in cmsReadTag

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=4652838645530624 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsoverwritetransformfuzzer Job Type: libfuzzerubsanlcms Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

qcms:fuzz: Stack-buffer-overflow in qcms::transform::qcms_transform_data_gray_template_lut::h2c3f2c2533cdd853

Detailed Report: https://oss-fuzz.com/testcase?key=4872574095982592 Project: qcms Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanqcms Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f733f8f7714 Crash State:...

SUSE SLED12 / SLES12 Security Update : lcms2 (SUSE-SU-2018:3545-1)

This update for lcms2 fixes the following security issues : CVE-2016-10165: The TypeMLURead function allowed remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggered an out-of-bounds heap read bsc1021364. CVE-2018-16435...

CVE-2018-11818

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, LUT configuration is passed down to driver from userspace via ioctl. Simultaneous update from userspace while kernel drivers are updating LUT registers can lead to race condition...

Race condition

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, LUT configuration is passed down to driver from userspace via ioctl. Simultaneous update from userspace while kernel drivers are updating LUT registers can lead to race condition...

CVE-2018-11818

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, LUT configuration is passed down to driver from userspace via ioctl. Simultaneous update from userspace while kernel drivers are updating LUT registers can lead to race condition...

CVE-2018-11818: Concurrent Execution using Shared Resource with Improper Synchronization

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, LUT configuration is passed down to driver from userspace via ioctl. Simultaneous update from userspace while kernel drivers are updating LUT registers can lead to race condition...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the drivers/video/msm/mdss/mdssmdppp.c file of Qualcomm’s Android operating system is related to an incorrect determination of the data size of the Gamut LUT. Exploiting this vulnerability can allow a remote attacker to obtain confidential information through a specially...

Code injection

drivers/video/msm/mdss/mdssmdppp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not properly determine the size of Gamut LUT data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28747914 and Qualcomm...

UBUNTU-CVE-2014-9893

drivers/video/msm/mdss/mdssmdppp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not properly determine the size of Gamut LUT data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28747914 and Qualcomm...

PT-2016-2613

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the improper determination of the size of Gamut LUT data in the Qualcomm components. This allows attackers to obtain sensitive information via a crafted application. The...

The vulnerability of the Firefox browser, which allows a perpetrator to gain access to protected information or cause a service failure

The vulnerability of the lutinverseinterp16 function in the QCMS library of the Firefox browser is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures using a specially crafted image...

Mozilla Firefox QCMS Library Buffer Overflow Vulnerability

Mozilla Firefox is an open source web browser. A security vulnerability exists in the 'lutinverseinterp16' function in the Mozilla Firefox QCMS library. A remote attacker could exploit specially crafted attributes in an image's ICC 4 profile to obtain sensitive information or conduct a...

PT-2015-2166

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0 Description The issue is caused by a buffer overflow in the lut inverse interp16 function of the QCMS library. This can be exploited by a remote attacker using a specially crafted image, potentially...

UBUNTU-CVE-2015-4504

The lutinverseinterp16 function in the QCMS library in Mozilla Firefox before 41.0 allows remote attackers to obtain sensitive information or cause a denial of service buffer over-read and application crash via crafted attributes in the ICC 4 profile of an image...