303 matches found
CVE-2026-112394
A flaw was found in pillow. A remote attacker could trigger an out-of-bounds read by supplying specially crafted image dimensions and input buffers to the raw image decoders. Because the decoder calculates an image row size smaller than the unpacker's actual memory footprint, the library reads pa...
Windows Raw Image Extension Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
Astra Linux – Vulnerability in exiv2
Exiv2 is a C++ library and a command-line utility for reading, writing, deleting, and modifying Exif, IPTC, XMP, and ICC image metadata. Prior to version 0.28.8, a buffer overflow vulnerability was discovered. The vulnerability resides in the CRW image parser. This issue has been fixed in version...
Microsoft Windows Raw Image Extension < 2.4.36.0 / 2.5.35.0 RCE (October 2026)
The Windows 'Raw Image Extension' app installed on the remote host is prior to 2.4.36.0 2.5.35.0 on Windows 11 versions 21H2 and 26H2. It is, therefore, affected by multiple remote code execution vulnerabilities: - A heap-based buffer overflow vulnerability exists in the losslessjpegloadraw...
CVE-2026-96943
Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-96202
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-96202
A heap-based buffer overflow exists in the Windows Raw Image Extension . This vulnerability enables an unauthorized attacker to achieve remote code execution over a network. The issue is associated with CWE-122 . No specific exploit details or information regarding in-the-wild exploitation are pr...
CVE-2026-96943
A vulnerability exists in the Windows Raw Image Extension due to an integer overflow or wraparound condition. This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-190 (Integer Overflow or Wraparound) and CWE-122 (Heap-...
EUVD-2026-99794
Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
Windows Raw Image Extension Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
Raw Image Extension Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-96202: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-96943: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
PT-2026-113029
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Raw Image Extension. This flaw allows an unauthorized attacker to execute arbitrary code over a network. A heap-based buffer...
PT-2026-113145
Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
Astra Linux – Vulnerability in imagemagick
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, there was a heap buffer over-read vulnerability in multiple raw image format handles. This vulnerability occurred when processing images with -extract dimension...
Astra Linux – Vulnerability in exiv2
In Exiv2 through 0.27.1, a vulnerability in CiffDirectory::readDirectory allows for integer overflow and out-of-bounds reads. This vulnerability enables an attacker to cause a denial of service SIGSEGV by using a crafted CRW image file...
Astra Linux – Vulnerability in libraw
In LibRaw, there is a out-of-bounds read vulnerability within the gethuffmandiff function libraw\src\x3f\x3futilspatched.cpp when reading data from an image file...