CVE-2020-35655

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

DEBIAN-CVE-2020-35655

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

ALPINE-CVE-2020-35655

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

Buffer overflow

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

CVE-2020-35655

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

CVE-2020-35655

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

Information Disclosure

sane is vulnerable to information disclosure. An out-of-bounds read allows a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program...

Information Disclosure

sane is vulnerable to information disclosure. An out-of-bounds read allows a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program...

Information Disclosure

sane is vulnerable to information disclosure. An out-of-bounds read allows a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program...

CVE-2020-25675

In the CropImage and CropImageToTiles routines of MagickCore/transform.c, rounding calculations performed on unconstrained pixel offsets was causing undefined behavior in the form of integer overflow and out-of-range values as reported by UndefinedBehaviorSanitizer. Such issues could cause a...

DEBIAN-CVE-2020-25676

In CatromWeights, MeshInterpolate, InterpolatePixelChannel, InterpolatePixelChannels, and InterpolatePixelInfo, which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor function. These calculations produced...

UBUNTU-CVE-2020-25676

In CatromWeights, MeshInterpolate, InterpolatePixelChannel, InterpolatePixelChannels, and InterpolatePixelInfo, which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor function. These calculations produced...

UBUNTU-CVE-2020-25675

In the CropImage and CropImageToTiles routines of MagickCore/transform.c, rounding calculations performed on unconstrained pixel offsets was causing undefined behavior in the form of integer overflow and out-of-range values as reported by UndefinedBehaviorSanitizer. Such issues could cause a...

CVE-2020-25675

In the CropImage and CropImageToTiles routines of MagickCore/transform.c, rounding calculations performed on unconstrained pixel offsets was causing undefined behavior in the form of integer overflow and out-of-range values as reported by UndefinedBehaviorSanitizer. Such issues could cause a...

ImageMagick Studio ImageMagick and Sanitize Input Validation Error Vulnerability

Imagemagick Studio ImageMagick is a suite of open source image processing software from Imagemagick Studio, USA. The software can read, convert, or write images in a variety of formats.Sanitize is an HTML and CSS cleaner by Ryan Grove, an individual developer in the United States, which supports...

Integer Overflow

ImageMagick is vulnerable to integer overflows. Rounding calculations performed on unconstrained pixel offsets could lead to integer overflows resulting in a system hang or other unexpected behaviors...

PT-2020-6192 · Openjpeg +9 · Openjpeg +9

Name of the Vulnerable Software and Affected Versions: OpenJPEG affected versions not specified Description: The issue is related to a buffer data boundary operation overflow in the OpenJPEG library, which is used for image encoding and decoding. This allows a remote attacker to access confidenti...

ValveSoftware GameNetworkingSockets Buffer Error Vulnerability

Valvesoftware ValveSoftware GameNetworkingSockets is a transport layer support software for games to pass data from Valvesoftware USA. A security vulnerability exists in Valves Game Networking Sockets versions prior to 1.2.0, which stems from the improper handling of unreliable segments with...

Pixar OpenUSD binary file format offset seek information leak vulnerability

Summary An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an arbitrary out-of-bounds memory access that could lead to the disclosure of sensitive information. This vulnerability could be used...

OpenEXR: std:: vector out-of-bounds read and write in ImfTileOffsets.cpp

An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp...