karchive/karchive_fuzzer: Use-of-uninitialized-value in QByteArray::QByteArray

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5657295809150976 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

gdal/envi_fuzzer: Heap-buffer-overflow in ENVIDataset::ReadHeader

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5710112736935936 Project: gdal Fuzzer: libFuzzergdalenvifuzzer Fuzz target binary: envifuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

CVE-2017-17722

In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remote denial of service attack via a crafted TIFF file...

CVE-2017-17722

In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remote denial of service attack via a crafted TIFF file...

PYSEC-2018-121

In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remote denial of service attack via a crafted TIFF file...

CVE-2017-17722

In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remote denial of service attack via a crafted TIFF file...

CVE-2017-17722

In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remote denial of service attack via a crafted TIFF file...

CVE-2017-17722

In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remote denial of service attack via a crafted TIFF file...

CVE-2017-17722

CVE-2017-17722 relates to Exiv2 0.26 where a reachable assertion in bigtiffimage.cpp readHeader could enable a remote denial of service via a crafted TIFF file. The connected advisories confirm multiple Exiv2-related issues across formats (CRW, PNG, WebP, PSD) and note the fixed version is 0.27.2...

PT-2018-19179

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to a reachable assertion in the readHeader function in bigtiffimage.cpp, which can be exploited to cause a remote denial of service attack. This can be achieved by using a crafted TIFF file...

PT-2018-6554

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.26 Description: The issue is related to a reachable assertion in the readHeader function, located in bigtiffimage.cpp, which can be triggered by a crafted TIFF file. This can lead to a remote denial of service attack...

CVE-2017-17722: Reachable Assertion

In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remote denial of service attack via a crafted TIFF file...

Poppler PDF Image Display DCTStream::readScan() Code Execution Vulnerability

Summary An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler-0.53.0. A specifically crafted pdf can cause an image resizing after allocation has already occurred, resulting in heap corruption which can lead to code execution. An attacker controlled PDF...

CVE-2006-6837: Undefined Security Weakness

Multiple stack-based buffer overflows in the 1 LoadTree, 2 ReadHeader, and 3 LoadXBOXTree functions in the ISO isowincmd plugin 1.7.3.3 and earlier for Total Commander allow user-assisted remote attackers to execute arbitrary code via a long pathname in an ISO image...

Total Commands ISO_WinCmd插件多个远程栈溢出漏洞

Total Commander（原Windows Commander）是一款磁盘文件管理软件，可以取代资源管理器。 Total Commander的isowincmd插件在创建ISO镜像中文件的完整路径名时存在栈溢出漏洞。 溢出发生在LoadTree和ReadHeader函数中，这两个函数通过读取ISO文件中的目录项创建ISO镜像中每个文件的完整路径名。从每个目录项读取的目录名通过lstrcatA连接到一起，最后连接到文件名，然后使用不安全的lstrcpyA函数将创建的完整路径名拷贝到固定长度的栈缓冲区。...