671 matches found
CVE-2024-8025
CVE-2024-8025 affects Nikon NEF Codec, in the NRW file parsing path. The flaw is a heap-based buffer overflow caused by missing validation of user-supplied data length before copying into a heap buffer, enabling Remote Code Execution . Exploitation requires user interaction (the target must visit...
Nikon NEF Codec 安全漏洞
Nikon NEF Codec is a codec module from Nikon Japan. A security vulnerability exists in Nikon NEF Codec that originates from the failure to properly validate the length of user-supplied data before copying it to a heap-based buffer. An attacker could exploit the vulnerability to execute arbitrary...
PT-2024-38756 · Nikon · Nikon Nef Codec
Name of the Vulnerable Software and Affected Versions: Nikon NEF Codec affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Nikon NEF Codec. User interaction is required to exploit this issue, where the target must...
Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nikon NEF Codec. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NRW...
nef-design.de Improper Access Control vulnerability OBB-3778923
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GLSA-202305-34 : CGAL: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202305-34 CGAL: Multiple Vulnerabilities - A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef2/PMioparser.h PMioparser::readvertex...
Fedora: Security Advisory for LibRaw (FEDORA-2023-659606fa84)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 38 Update: LibRaw-0.21.1-4.fc38
LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...
SUSE CVE-2020-28601
A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef2/PMioparser.h PMioparser::readvertex Faceof OOB read. An attacker can provide malicious input to trigger this vulnerability...
SUSE CVE-2020-28636
A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsloop slh-twin An attacker can provide malicious input to trigger this vulnerability...
SUSE CVE-2020-35628
A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsloop slh-incidentsface. An attacker can provide malicious input to trigger this vulnerability...
SUSE CVE-2020-35636
A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in NefS2/SNCioparser.h SNCioparser::readsface sfh-volume OOB read. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution...
Vulnerability of the SNC_io parser function <EW>::read_sedge() and seh->sprev() in the Nef_S2/SNC_io parser.h component. This component is part of the Computational Geometry Algorithms Library CGAL, allowing an intruder to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the SNCio parser function ::readsedge in the NefS2/SNCio parser component, as part of the CGAL computational geometry algorithm library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise...
Vulnerability of the PM_io parser function: <PMDEC>::read_face(), set_halfedge() in the Nef_2/PM_io parser component. This is part of the CGAL computational geometry algorithm library, which allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the PMioparser function in the Nef2/PMioparser.h component, located in the computational geometry library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause servi...
Vulnerability of the SM_io parser function: Decorator_.::read_vertex(), set_face() in the component Nef_S2/SM_io parser.h, part of the Computational Geometry Algorithms library CGAL. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the SMio parser function in the NefS2/SMioparser.h component, belonging to the Computational Geometry Algorithms library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity,...
Vulnerability of the SNC_io parser function <EW>: read_facet(), incident_volume(). Component: Nef_S2/SNC_io parser.h library, algorithm library for computational geometry CGAL. This allows an intruder to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the SNCio parser function ::readfacet and fh-incidentvolume in the NefS2/SNCio parser component’s NefS2/SNCio parser.h file is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...
Vulnerability of the SNC_io parser function <EW>::read_edge(), eh->twin() in the Nef_S2/SNC_io parser.h component of the Computational Geometry Algorithms library. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the SNCioparser function involves the use of unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file. This vulnerability is related ...
Vulnerability of SNC_io parser<EW>: read_vertex(); vh->sfaces_last(); component Nef_S2/SNC_io parser.h library of computational geometry algorithms CGAL, allowing a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of SNCioparser is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file. This vulnerability is associated with the...
Vulnerability of the SM_io parser function: Decorator_::read_vertex(), set_first_out_edge() – components from Nef_S2/SM_io parser.h; library of computational geometry algorithms CGAL. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the SMio parser function in the decorator::readvertex and setfirstoutedge components of the NefS2/SMio parser library, part of the Computational Geometry Library CGAL, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to...
[SECURITY] [DLA 3226-1] cgal security update
Debian LTS Advisory DLA-3226-1 [email protected] https://www.debian.org/lts/security/ Helmut Grohne December 06, 2022 https://wiki.debian.org/LTS Package : cgal Version : 4.13-1+deb10u1 CVE ID : CVE-2020-28601 CVE-2020-28602 CVE-2020-28603 CVE-2020-28604 CVE-2020-28605 CVE-2020-28606...