Buffer Over-read

gpac:xenial is vulnerable to buffer over-read. The function urnRead in isomedia/boxcodebase.c has a heap-based buffer over-read...

Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer over-read in the ImportGrayQuantumType function, through ReadGRAYImage in coders/gray.c...

Arbitrary Code Execution

GIMP is vulnerable to arbitrary code execution. A heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c allows an attacker to execute arbitrary code via a malicious bits-per-pixel value for an RGBA image...

Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer over-read in ReadCMYKImage in coders/cmyk.c...

Denial Of Service (DoS)

binutils:bionic is vulnerable to denial of service. A heap-based buffer over-read issue was discovered in the function secmergehashlookup in merge.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.31, because bfdaddmergesection mishandles section merges when...

Denial Of Service (DoS)

elfutils is vulnerable to denial of service. A heap-based buffer over-read in the checkgroup function in elflint.c allow a remote attacker to cause crash the application using a malicious ELF file...

Denial Of Service (DoS)

binutils is vulnerable to denial of service. A heap-based buffer over-read in bfdgetl32 in libbfd.c allows an attacker to crash the application via a malicious PE file...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer over-read in xiphPackHeaders in modules/demux/xiph.h when parsing an .ogg file...

Denial Of Service (DoS)

binutils:bionic is vulnerable to denial of service DoS. An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils. There is a heap-based buffer over-read in bfddoprnt in bfd.c because elfobjectp in elfcode.h mishandles an eshstrndx section of typ...

Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, when LocaleNCompare reads heap data beyond the allocated region...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. A heap-based buffer over-read in ReadOneJNGImage in coders/png.c allows an attacker to execute arbitrary code on the host OS...

Arbtirary Code Execution

GIMP is vulnerable to arbitrary code execution. A heap-based buffer over-read in the function readcreatorblock in plug-ins/common/file-psp.c allows an attacker to execute arbitrary code on the host OS...

Arbtirary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. A heap-based buffer over-read in WriteOnePNGImage in coders/png.c allows an attacker to execute arbitrary code on the host OS via a malicious file...

openSUSE Security Update : libjpeg-turbo (openSUSE-2020-1458)

This update for libjpeg-turbo fixes the following issues : - CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file bsc1172491. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks...

openSUSE Security Update : libqt4 (openSUSE-2020-1452)

This update for libqt4 fixes the following issues : - Fix buffer over-read in readxbmbody boo1176315, CVE-2020-17507 - Fix 'double free or corruption' in QXmlStreamReader boo1118595, CVE-2018-15518 - Fix QBmpHandler segfault on malformed BMP file boo1118596, CVE-2018-19873 - Fix crash when parsin...

OPENSUSE-SU-2020:1458-1 Security update for libjpeg-turbo

This update for libjpeg-turbo fixes the following issues: - CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file bsc1172491. This update was imported from the SUSE:SLE-15:Update update project...

Security update for libjpeg-turbo (moderate)

openSUSE Security Update: Security update for libjpeg-turbo Announcement ID: openSUSE-SU-2020:1458-1 Rating: moderate References: 1172491 Cross-References: CVE-2020-13790 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

openSUSE: Security Advisory for libqt4 (openSUSE-SU-2020:1452-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:1452-1 Security update for libqt4

This update for libqt4 fixes the following issues: Fix buffer over-read in readxbmbody boo1176315, CVE-2020-17507 Fix 'double free or corruption' in QXmlStreamReader boo1118595, CVE-2018-15518 Fix QBmpHandler segfault on malformed BMP file boo1118596, CVE-2018-19873 Fix crash when parsing malform...

Security update for libqt4 (moderate)

openSUSE Security Update: Security update for libqt4 Announcement ID: openSUSE-SU-2020:1452-1 Rating: moderate References: 1118595 1118596 1118599 1121214 1176315 Cross-References: CVE-2018-15518 CVE-2018-19869 CVE-2018-19873 CVE-2020-17507 Affected Products: openSUSE Leap 15.1 An update that...