Lucene search
K

39 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в pillow

In Pillow before 8.1.0, PcxDecode has a buffer over-reading issue when decoding a crafted PCX file, because the user-supplied stride value is trusted for buffer calculations...

7.1CVSS7AI score0.00293EPSS
Exploits0References2
OSV
OSV
added 2026/05/14 6:1 p.m.5 views

RLSA-2026:17533 Important: gimp:2.8 security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: GIMP:Memo...

7.8CVSS7.4AI score0.00074EPSS
Exploits1References5
AlmaLinux
AlmaLinux
added 2026/05/12 12:0 a.m.7 views

Important: gimp security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: GIMP:Memo...

7.8CVSS6.2AI score0.00074EPSS
Exploits1References14
AlpineLinux
AlpineLinux
added 2026/03/26 12:8 p.m.1 views

CVE-2026-4887

A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a user to open a specially crafted PCX image. Successful exploitation could lead to out-of-bounds memory disclosure and a possible...

7.1CVSS5.9AI score0.0005EPSS
Exploits1References10
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2019-12218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libSDL2.a in Simple DirectMedia Layer SDL 2.0.9 when used in conjunction with libSDL2image.a in SDL2image 2.0.4. There is a NULL...

6.5CVSS6.9AI score0.00737EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2019-5051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2image, version 2.0.4. A missing error handler can lead to a buffer...

8.8CVSS8.4AI score0.01381EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2019-5057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable code execution vulnerability exists in the PCX image-rendering functionality of SDL2image 2.0.4. A specially crafted PCX image can cause a heap...

8.8CVSS8.4AI score0.00968EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/02/20 12:0 a.m.29 views

Amazon Linux 2023 : GraphicsMagick, GraphicsMagick-c++, GraphicsMagick-c++-devel (ALAS2023-2024-532)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-532 advisory. Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format...

7.8CVSS7.3AI score0.00132EPSS
Exploits2References6
OSV
OSV
added 2023/11/17 11:6 a.m.1 views

OESA-2023-1818 GraphicsMagick security update

GraphicsMagick is the swiss army knife of image processing. Comprised of 267K physical lines according to David A. Wheeler's SLOCCount of source code in the base package or 1,225K including 3rd party libraries it provides a robust and efficient collection of tools and libraries which support...

5.5CVSS6.8AI score0.00132EPSS
Exploits1References2
OSV
OSV
added 2023/11/10 11:6 a.m.1 views

OESA-2023-1811 GraphicsMagick security update

GraphicsMagick is the swiss army knife of image processing. Comprised of 267K physical lines according to David A. Wheeler's SLOCCount of source code in the base package or 1,225K including 3rd party libraries it provides a robust and efficient collection of tools and libraries which support...

5.5CVSS6.8AI score0.00132EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/08/26 8:13 a.m.1 views

SUSE CVE-2020-21679

Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format...

5.5CVSS6.9AI score0.00132EPSS
Exploits1References6
UbuntuCve
UbuntuCve
added 2023/08/22 7:16 p.m.31 views

CVE-2020-21679

Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format...

5.5CVSS6.7AI score0.00132EPSS
Exploits1References2
OSV
OSV
added 2023/08/22 7:16 p.m.1 views

UBUNTU-CVE-2020-21679

Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format...

5.5CVSS6.8AI score0.00132EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/08/22 12:0 a.m.19 views

CVE-2020-21679

Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format...

6.2AI score0.00132EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/08/22 12:0 a.m.12 views

CVE-2020-21679

Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format...

6.8AI score0.00132EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/02/03 12:0 a.m.2 views

Allegro 缓冲区错误漏洞

Allegro is Allegro open source a cross-platform library mainly for video games and multimedia programming. A security vulnerability exists in Allegro 5.2.6 and earlier versions, which stems from the presence of a buffer overflow vulnerability that can be exploited by an attacker to cause a denial...

6.5CVSS6.7AI score0.00383EPSS
Exploits1References2
Veracode
Veracode
added 2021/02/03 8:5 a.m.23 views

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. A memory leak vulnerability in WritePCXImage in coders/pcx.c allows an attacker to crash the application...

6.5CVSS3.5AI score0.00085EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2021/01/12 9:15 a.m.1 views

ALPINE-CVE-2020-35653

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations...

7.1CVSS8.7AI score0.00293EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2020/02/20 10:18 p.m.3 views

python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c

A flaw was discovered in python-pillow does where it does not properly restrict operations within the bounds of a memory buffer when decoding PCX images. An application that uses python-pillow to decode untrusted images may be vulnerable to this flaw, which can allow an attacker to crash the...

9.8CVSS7.4AI score0.01753EPSS
Exploits0References4
OSV
OSV
added 2020/01/03 1:15 a.m.1 views

ALPINE-CVE-2020-5312

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...

9.8CVSS7.3AI score0.01753EPSS
Exploits0References1
Rows per page
Query Builder