Lucene search
K

41 matches found

Cvelist
Cvelist
added 2026/04/26 1:19 p.m.27 views

CVE-2018-25279 jiNa OCR Image to Text 1.0 Denial of Service via PNG

jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the application by processing a malformed PNG file. Attackers can create a specially crafted PNG file with an oversized buffer and trigger the crash when the application attempts to convert...

6.9CVSS0.00123EPSS
Exploits0References3
CVE
CVE
added 2026/04/26 1:19 p.m.6 views

CVE-2018-25279

jiNa OCR Image to Text 1.0 contains a local denial-of-service vulnerability: processing a specially crafted PNG with an oversized buffer causes the application to crash during PNG-to-PDF conversion. Root cause: malformed PNG triggers a crash in the image-to-text pipeline. Impact is local, with av...

6.9CVSS5.5AI score0.00123EPSS
Exploits0References3
EUVD
EUVD
added 2026/04/26 1:19 p.m.3 views

EUVD-2018-21799

jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the application by processing a malformed PNG file. Attackers can create a specially crafted PNG file with an oversized buffer and trigger the crash when the application attempts to convert...

6.9CVSS5.5AI score0.00123EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/04/26 12:0 a.m.3 views

PT-2026-35249

jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the application by processing a malformed PNG file. Attackers can create a specially crafted PNG file with an oversized buffer and trigger the crash when the application attempts to convert...

6.9CVSS5.4AI score0.00123EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/03/27 2:24 p.m.3 views

CVE-2021-27506

The ClamAV Engine version 0.103.1 and below component embedded in Storsmshield Network Security SNS is subject to DoS in case of parsing of malformed png files. This affect Netasq versions 9.1.0 to 9.1.11 and SNS versions 1.0.0 to 4.2.0. This issue is fixed in SNS 3.7.19, 3.11.7 and 4.2.1...

5.5CVSS6.6AI score0.01312EPSS
Exploits0References1
OSV
OSV
added 2025/11/25 12:15 a.m.1 views

AZL-70865 CVE-2025-64505 affecting package openjpeg2 2.3.1-12

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng's pngdoquantize function when processing PNG files with malformed palette...

6.1CVSS6.2AI score0.00181EPSS
Exploits2References1
EUVD
EUVD
added 2025/11/24 11:38 p.m.1 views

EUVD-2025-199239

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng's pngdoquantize function when processing PNG files with malformed palette...

6.1CVSS6.7AI score0.00181EPSS
Exploits2References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-2191

Malware in sbrugna...

8.8CVSS8.6AI score0.01469EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2015-0118

Malware in sbrugna...

4.3CVSS6.2AI score0.15457EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/22 6:34 a.m.5 views

CVE-2017-8400

In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function pngload in lib/png.c:755. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution...

8.8CVSS7.3AI score0.02101EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2023/02/15 6:20 a.m.3 views

SUSE CVE-2004-0599

Multiple integer overflows in the 1 pngreadpng in pngread.c or 2 pnghandlesPLT functions in pngrutil.c or 3 progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service application crash via a malformed PNG image...

5CVSS6.8AI score0.062EPSS
Exploits1References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:45 a.m.4 views

SUSE CVE-2017-8400

In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function pngload in lib/png.c:755. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution...

8.8CVSS9.4AI score0.02101EPSS
Exploits1References3
Prion
Prion
added 2021/03/19 3:15 p.m.22 views

Code injection

The ClamAV Engine version 0.103.1 and below component embedded in Storsmshield Network Security SNS is subject to DoS in case of parsing of malformed png files. This affect Netasq versions 9.1.0 to 9.1.11 and SNS versions 1.0.0 to 4.2.0. This issue is fixed in SNS 3.7.19, 3.11.7 and 4.2.1...

4.3CVSS5.2AI score0.01312EPSS
Exploits0References2Affected Software3
Cvelist
Cvelist
added 2021/03/19 2:28 p.m.16 views

CVE-2021-27506

The ClamAV Engine version 0.103.1 and below component embedded in Storsmshield Network Security SNS is subject to DoS in case of parsing of malformed png files. This affect Netasq versions 9.1.0 to 9.1.11 and SNS versions 1.0.0 to 4.2.0. This issue is fixed in SNS 3.7.19, 3.11.7 and 4.2.1...

5.8AI score0.01312EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/03/19 12:0 a.m.3 views

PT-2021-17484 · Netasq +2 · Netasq +2

Name of the Vulnerable Software and Affected Versions: Stormshield Network Security versions 1.0.0 through 4.2.0 Netasq versions 9.1.0 through 9.1.11 Description: The issue affects the ClamAV Engine component, which can be subject to a Denial of Service DoS when parsing malformed png files, leadi...

7.8CVSS7.8AI score0.03155EPSS
Exploits1References23
OSV
OSV
added 2019/12/03 10:15 p.m.2 views

CVE-2019-5076

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG header-parser of the Accusoft ImageGear 19.3.0 library. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victio...

8.8CVSS7.6AI score0.03687EPSS
Exploits1References1
OSV
OSV
added 2018/04/16 9:58 a.m.2 views

DEBIAN-CVE-2018-10112

An issue was discovered in GEGL through 0.3.32. The gegltilebackendswapconstructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to cause a denial of service write access violation or possibly have unspecified other impact via a malformed PNG file that is mishandled during a...

8.8CVSS7.6AI score0.01469EPSS
Exploits1References1
OSV
OSV
added 2018/04/16 9:58 a.m.3 views

CVE-2018-10112

An issue was discovered in GEGL through 0.3.32. The gegltilebackendswapconstructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to cause a denial of service write access violation or possibly have unspecified other impact via a malformed PNG file that is mishandled during a...

8.8CVSS9.1AI score
Exploits0References2
Prion
Prion
added 2018/04/16 9:58 a.m.15 views

Design/Logic Flaw

An issue was discovered in GEGL through 0.3.32. The gegltilebackendswapconstructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to cause a denial of service write access violation or possibly have unspecified other impact via a malformed PNG file that is mishandled during a...

6.8CVSS9.1AI score0.01469EPSS
Exploits1References2Affected Software1
CNVD
CNVD
added 2018/04/16 12:0 a.m.3 views

GEGL Denial of Service Vulnerability (CNVD-2018-08258)

GEGL is a data stream based image processing framework. The framework provides floating point processing and lossless image processing for projects such as the GNU Image Manipulation Program. A security vulnerability exists in the 'gegltilebackendswapconstructed' function in the...

8.8CVSS6.7AI score0.01469EPSS
Exploits1References1
Rows per page
Query Builder