CVE-2021-40449-Exploit

CVE-2021-40449-Exploit solo funciona en Windows 10 14393 y Windows 10 17763 Usar Palette para Spay y RtlSetAllBits para escribir...

CVE-2020-17057

Escribí este exp basado en este blog（https://blogs.360.cn/post/CVE-2020-17057%20detail%20and%20exploit.html），Pero terminé solo con objetos de palette con punteros de datos colgantes. Debido al aislamiento de tipos, no puedo obtener primitivas arbitrarias de R/W usando objetos palette o bitmap. Si...

cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp Este programa es un exploit para cve-2018-8453. Plataforma de desarrollo/pruebas: x86: windows 10 rs2 15063 x64: windos 10 rs2 16299 Nota: utiliza Palette para leer y escribir el kernel Declaración importante: esta herramienta se utiliza únicamente para...

AlmaLinux 9.2 [TuxCare] Security Update: libpng / libpng-devel / libpng-static / libpng-tools (ALMALINUX9.2:CLSA-2026:1768212418)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1768212418 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files...

AlmaLinux 9.6 [TuxCare] Security Update: libpng15 (ALMALINUX9.6:CLSA-2026:1785493623)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785493623 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files...

Rocky Linux 9.6 [TuxCare] Security Update: libpng / libpng-devel / libpng-static / libpng-tools (ALMALINUX9.6:CLSA-2025:1765380269)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1765380269 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files...

CVE-2025-64720-PoC

CVE-2025-64720: Desbordamiento de Búfer en libpng en la Premultiplicación de Paleta Estado : Corregido Gravedad : Alta ID CVE : CVE-2025-64720 Fecha de Descubrimiento : 2025-11-XX Divulgación Pública : 2025-11-21 Resumen Resumen Existe una vulnerabilidad de lectura fuera de los límites en la...

Fedora 45 : perl-Imager (2026-8e3688d489)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8e3688d489 advisory. 1.036 bump - Fix CVE-2026-93019 TGA large color map size interpreted as negative - Fix CVE-2026-93018 paletted images: out-of-range color index...

Fedora 43 : perl-Imager (2026-625ab5c382)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-625ab5c382 advisory. 1.036 bump - Fix CVE-2026-93019 TGA large color map size interpreted as negative - Fix CVE-2026-93018 paletted images: out-of-range color index...

Fedora 44 : perl-Imager (2026-12f0a70554)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-12f0a70554 advisory. 1.036 bump - Fix CVE-2026-93019 TGA large color map size interpreted as negative - Fix CVE-2026-93018 paletted images: out-of-range color index...

CVE-2026-63279

A flaw was found in LibreOffice. When importing a specially crafted PICT image embedded in a document, an out-of-bounds read vulnerability exists. This occurs because the palette index in the image data is not validated against the actual size of the color palette. A remote attacker could exploit...

Linux Distros Unpatched Vulnerability : CVE-2026-63279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour palette. The...

CVE-2026-63279

LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour palette. The palette index held in the image data was used without being checked against the number of entries the palette has, so an index past the las...

CVE-2026-63279

LibreOffice is affected by an out-of-bounds read in its PICT image import functionality. When importing a PICT image that uses a colour palette, the palette index taken from the image data was not validated against the number of palette entries, allowing a read beyond the palette's allocated memo...

CVE-2026-63279 Out of bounds read in PICT image import

LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour palette. The palette index held in the image data was used without being checked against the number of entries the palette has, so an index past the las...

CVE-2026-63279 Out of bounds read in PICT image import

LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour palette. The palette index held in the image data was used without being checked against the number of entries the palette has, so an index past the las...

EUVD-2026-84358

LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour palette. The palette index held in the image data was used without being checked against the number of entries the palette has, so an index past the las...

CVE-2026-63279: Out-of-bounds Read

LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour palette. The palette index held in the image data was used without being checked against the number of entries the palette has, so an index past the las...

Linux Distros Unpatched Vulnerability : CVE-2026-50291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and...

OESA-2026-3906 openjdk-1.8.0 security update

The OpenJDK runtime environment 8. Security Fixes: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng's pngdoquantize function whe...