68 matches found
CLEANSTART-2026-XV23070 Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image
CVE-2026-42500 affects multiple packages. Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image. See references for individual vulnerability details...
Astra Linux – vulnerability in libpng1.6
LIBPNG is a reference library used in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.6.36 through 1.6.55, an out-of-bounds read and write vulnerability exists in libpng’s ARM/AArch64 Neon-optimized palette expansion path. When...
CVE-2026-102505
Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in igsampffp. For a paletted image, getsamples with type "float" allocates a buffer of one sample per pixel and fetches every requested channel of each pixel into it. Requesting more than one...
CVE-2026-102505 Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp
Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in igsampffp. For a paletted image, getsamples with type "float" allocates a buffer of one sample per pixel and fetches every requested channel of each pixel into it. Requesting more than one...
CVE-2026-102505
Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in igsampffp. For a paletted image, getsamples with type "float" allocates a buffer of one sample per pixel and fetches every requested channel of each pixel into it. Requesting more than one...
CVE-2026-102505
The perl-Imager library (versions before 1.037 ) is vulnerable to a heap-based buffer overflow when processing floating-point samples from a paletted image in i_gsampf_fp . The root cause is that the getsamples() function with type "float" incorrectly allocates a buffer for only one sample per pi...
CVE-2026-102505
Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in igsampffp. For a paletted image, getsamples with type "float" allocates a buffer of one sample per pixel and fetches every requested channel of each pixel into it. Requesting more than one...
CVE-2026-102505 Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp
Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in igsampffp. For a paletted image, getsamples with type "float" allocates a buffer of one sample per pixel and fetches every requested channel of each pixel into it. Requesting more than one...
EUVD-2026-90812
Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in igsampffp. For a paletted image, getsamples with type "float" allocates a buffer of one sample per pixel and fetches every requested channel of each pixel into it. Requesting more than one...
CVE-2026-102505 Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp
Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in igsampffp. For a paletted image, getsamples with type "float" allocates a buffer of one sample per pixel and fetches every requested channel of each pixel into it. Requesting more than one...
Linux Distros Unpatched Vulnerability : CVE-2026-102505
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in igsampffp. For a paletted image, getsamples with ty...
PT-2026-103862
Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i gsampf fp. For a paletted image, getsamples with type "float" allocates a buffer of one sample per pixel and fetches every requested channel of each pixel into it. Requesting more than o...
CVE-2026-42500
A flaw was found in golang.org/x/image/bmp. A remote attacker could exploit this vulnerability by providing a specially crafted paletted BMP Bitmap file. Decoding this file with an out-of-range palette index causes the application to panic when accessing invalid image pixels, leading to a Denial ...
SUSE CVE-2026-42500
Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image...
libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion
A flaw was found in libpng. A remote attacker could exploit an out-of-bounds read and write vulnerability in the ARM/AArch64 Neon-optimized palette expansion path. This occurs when processing a final partial chunk of 8-bit paletted rows without verifying sufficient input pixels, leading to...
libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion
A flaw was found in libpng. A remote attacker could exploit an out-of-bounds read and write vulnerability in the ARM/AArch64 Neon-optimized palette expansion path. This occurs when processing a final partial chunk of 8-bit paletted rows without verifying sufficient input pixels, leading to...
DEBIAN-CVE-2026-42500
Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image...
CVE-2026-42500
Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image...
