EUVD-2026-16341

A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the icoreadinfo and icoreadicon functions. This issue arises because a size calculation for image buffers can wrap around due to a 32-bit integer evaluation, allowing oversized imag...

CVE-2026-2272 Gimp: gimp: memory corruption due to integer overflow in ico file handling

A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the icoreadinfo and icoreadicon functions. This issue arises because a size calculation for image buffers can wrap around due to a 32-bit integer evaluation, allowing oversized imag...

CVE-2026-2272 Gimp: gimp: memory corruption due to integer overflow in ico file handling

A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the icoreadinfo and icoreadicon functions. This issue arises because a size calculation for image buffers can wrap around due to a 32-bit integer evaluation, allowing oversized imag...

kernel: Fix of 39 CVEs

nfs: fix UAF in direct writes CVE-2024-26958 - NFSD: Fix the behavior of READ near OFFSETMAX CVE-2022-48827 - thermal: core: prevent potential string overflow CVE-2023-52868 - ath5k: fix OOB in ath5keepromreadpcalinfo5111 CVE-2021-47633 - RDMA/cma: Ensure rdmaaddrcancel happens before issuing...

The vulnerability of the `ocfs2_global_read_info()` function in the `/fs/ocfs2/quota_local.c` module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ocfs2globalreadinfo function in the /fs/ocfs2/quotalocal.c module of the Linux kernel is related to incorrect resource initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2023-42781

Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs. This is a different issue than CVE-2023-42663 but leading to similar outcome. Users of Apache Airflow are...

SUSE CVE-2007-2756

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

SUSE CVE-2017-12143

In libquicktime 1.2.4, an allocation failure was found in the function quicktimereadinfo in lqtquicktime.c, which allows attackers to cause a denial of service via a crafted file...

SUSE CVE-2017-1000229

Integer overflow bug in function minitiffreadinfo of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service...

libpng:libpng_read_fuzzer: Dynamic-stack-buffer-overflow in OSS_FUZZ_png_read_info

Project: https://github.com/glennrp/libpng.git Detailed Report: https://oss-fuzz.com/testcase?key=4516115123404800 Project: libpng Fuzzing Engine: afl Fuzz Target: libpngreadfuzzer Job Type: aflasanlibpng Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE Crash Address:...

imagemagick/ping_icon_fuzzer: Use-of-uninitialized-value in png_crc_finish

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5751794220662784 Project: imagemagick Fuzzer: libFuzzerimagemagickpingiconfuzzer Fuzz target binary: pingiconfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

OptiPNG Integer Overflow Vulnerability

OptiPNG is a tool to optimize the compression of PNG images. An integer overflow vulnerability exists in the minutiffreadinfo function in optipng 0.7.6. An attacker could exploit this vulnerability to remotely execute code or cause a denial of service...

PT-2017-10925

Name of the Vulnerable Software and Affected Versions optipng version 0.7.6 Description The issue is related to an integer overflow bug in the minitiff read info function, which can be exploited by an attacker to remotely execute code or cause a denial of service. Recommendations For optipng...

PT-2017-12821

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.2.0 Description The issue is related to the bmp read info header function, which does not properly handle headers with a zero biBitCount, leading to a denial of service due to memory allocation failure in the opj image creat...

DEBIAN-CVE-2017-12143

In libquicktime 1.2.4, an allocation failure was found in the function quicktimereadinfo in lqtquicktime.c, which allows attackers to cause a denial of service via a crafted file...

libquicktime 'quicktime_read_info' function denial of service vulnerability

libquicktime is a library for reading and writing files in quicktime, avi and mp4 formats. A security vulnerability exists in the 'quicktimereadinfo' function of the lqtquicktime.c file in libquicktime version 1.2.4. An attacker can exploit this vulnerability to cause a denial of service with the...

PT-2017-12364

Name of the Vulnerable Software and Affected Versions libquicktime version 1.2.4 Description An allocation failure was found in the quicktime read info function in lqt quicktime.c, which allows attackers to cause a denial of service via a crafted file. Recommendations For libquicktime version...

CVE-2016-4842

Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read...

PT-2017-17745

Name of the Vulnerable Software and Affected Versions ImageWorsener version 1.3.0 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by providing a crafted file. This is due to a problem in the iwbmp read info header function...