Lucene search
+L

3606 matches found

CNNVD
CNNVD
•added 2022/09/06 12:00 a.m.•17 views

Google Pixel 资源管理错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...

7CVSS7AI score0.00077EPSS
SaveExploits0References4
Android Security Bulletins
Android Security Bulletins
•added 2022/09/06 12:00 a.m.•29 views

Pixel Update Bulletin—September 2022Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2022-09-05 or later address all issues in this bulletin and all issues in the September 2022 Android...

6.8CVSS8.1AI score0.00395EPSS
SaveExploits0
osv-debian
osv-debian
•added 2022/09/01 6:15 p.m.•10 views

DEBIAN-CVE-2020-35533

In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobecopypixel" function libraw\src\decoders\dng.cpp when reading data from the image file...

5.5CVSS5.4AI score0.00298EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/09/01 12:00 a.m.•11 views

Libraw 缓冲区错误漏洞

Libraw is a C++ library from Libraw Inc. for processing RAW CRW/CR2, NEF, RAF, DNG, andothers format images, supporting various operating systems. A security vulnerability exists in Libraw, which stems from an out-of-bounds read in the adobecopypixel function when reading data from an image file...

5.5CVSS5.5AI score0.00298EPSS
SaveExploits0References7
NVD
NVD
•added 2022/08/29 3:15 p.m.•30 views

CVE-2022-0284

A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format TIFF image to convert it into a PICON file format. This issue can potentially lead to a...

7.1CVSS0.00581EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/08/29 2:03 p.m.•48 views

CVE-2022-0284

A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format TIFF image to convert it into a PICON file format. This issue can potentially lead to a...

6.8AI score0.00581EPSS
SaveExploits1References4
CVE
CVE
•added 2022/08/29 2:03 p.m.•150 views

CVE-2022-0284

CVE-2022-0284 describes a heap-based buffer over-read in ImageMagick's GetPixelAlpha() within pixel-accessor.h. When a specially crafted TIFF is converted to PICON, it can lead to denial of service and information disclosure. The provided documents corroborate the existence of this vulnerability ...

7.1CVSS6.4AI score0.00581EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/29 12:00 a.m.•5 views

CVE-2022-0284: Out-of-bounds Read

A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format TIFF image to convert it into a PICON file format. This issue can potentially lead to a...

7.1CVSS6.9AI score0.00581EPSS
SaveExploits1References3
osv-debian
osv-debian
•added 2022/08/25 8:15 p.m.•12 views

DEBIAN-CVE-2021-20224

An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum function in MagickCore/quantum-export.c. Function calls to GetPixelIndex could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead t...

5.5CVSS6.7AI score0.00384EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/08/25 12:00 a.m.•16 views

ImageMagick 输入验证错误漏洞

ImageMagick is a set of open-source image processing software from the American company ImageMagick. The software can read, convert, or write images in a variety of formats. ImageMagick has a security vulnerability, the vulnerability stems from its MagickCore/quantum-export.c component of the...

5.5CVSS6.8AI score0.00384EPSS
SaveExploits0References11
OSS-Fuzz
OSS-Fuzz
•added 2022/08/24 10:38 a.m.•9 views

libpng:libpng_read_fuzzer: Use-of-uninitialized-value in png_read_filter_row_paeth_multibyte_pixel

Detailed Report: https://oss-fuzz.com/testcase?key=5410442889003008 Project: libpng Fuzzing Engine: libFuzzer Fuzz Target: libpngreadfuzzer Job Type: libfuzzermsanlibpng Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pngreadfilterrowpaethmultibytepixel...

5.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/08/19 12:00 a.m.•20 views

The vulnerability of the kbase_jd_user_buf_pin_pages function (mali_kbase_mem.c) in the graphics processor driver for Android devices from Google Pixel allows a hacker to escalate their privileges.

The vulnerability of the kbasejduserbufpinpages function malikbasemem.c in the graphics processor driver for Android devices from Google Pixel devices is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS6.7AI score0.00685EPSS
SaveExploits0References4
Wired Threat Level
Wired Threat Level
•added 2022/08/10 9:38 p.m.•31 views

Google's Android Red Team Had a Full Pixel 6 Pwn Before Launch

Before the flagship phone ever landed in users’ hands, the security team thoroughly hacked it by finding bugs and developing exploits...

2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/08/10 4:07 p.m.•10 views

Malicious code in tracking-pixel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c716881c807de2fd9c60dcb6d0fe33b8a7dc68df7808c9d5e277cc8bfdc1398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv-mal
osv-mal
•added 2022/08/10 4:07 p.m.•15 views

MAL-2022-6624 Malicious code in tracking-pixel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c716881c807de2fd9c60dcb6d0fe33b8a7dc68df7808c9d5e277cc8bfdc1398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Snyk
Snyk
•added 2022/08/10 8:06 a.m.•8 views

Malicious Package

Overview tracking-pixel is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

9.8CVSS7.1AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2022/08/01 12:00 a.m.•12 views

Google Pixel 资源管理错误漏洞

Google Pixel is a smartphone from the American company Google Google. There is a security vulnerability in the Google Pixel kernel that stems from a vulnerability that can be exploited by an attacker to cause elevation of privilege...

6.7CVSS6.7AI score0.00105EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/08/01 12:00 a.m.•18 views

Google Pixel 资源管理错误漏洞

Google Pixel is a smartphone from the American company Google Google. There is a security vulnerability in the Google Pixel kernel that stems from a vulnerability that can be exploited by an attacker to cause elevation of privilege...

6.7CVSS6.6AI score0.00083EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/08/01 12:00 a.m.•25 views

Google Pixel 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. A denial of service vulnerability exists in Google Android, which can be exploited by an attacker to cause a denial of service due to failure to properly handle incoming error messages...

7.5CVSS5.8AI score0.00601EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/08/01 12:00 a.m.•16 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. The Google Pixel modem suffers from a security vulnerability that stems from the fact that an attacker can exploit the vulnerability to cause information leakage...

7.5CVSS7.3AI score0.00337EPSS
SaveExploits0References3
Rows per page
Query Builder