11 matches found
UBUNTU-CVE-2026-55192
Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatch...
CVE-2026-0537
A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...
CVE-2026-0661 Out-of-Bounds Write in RGB File Parsing
A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...
CVE-2026-0537 RGB File Parsing Memory Corruption
A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...
JLSEC-2025-254 `tif_getimage.c` in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an...
tifgetimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition...
AZL-70931 CVE-2025-64506 affecting package libpng for versions less than 1.6.51-1
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's pngwriteimage8bit function when processing 8-bit images through t...
SUSE SLED15 / SLES15 Security Update : libavif (SUSE-SU-2025:02816-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02816-1 advisory. - update to 1.3.0: - CVE-2025-48175: Fixed an integer overflows in multiplications involving rgbRowBytes,...
CVE-2025-55005
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, when preparing to transform from Log to sRGB colorspaces, the logmap construction fails to handle cases where the reference-black or reference-white value is larger than 1024...
Autodesk 3ds Max 安全漏洞
Autodesk 3ds Max is a full-featured, three-dimensional computer graphics software from the American company Autodesk. A security vulnerability exists in Autodesk 3ds Max that stems from a specially crafted RBG file that could lead to out-of-bounds writes...
Three Resource Management Error Vulnerability
Mrdoob Three is an application by the individual developers of Mrdoob USA. It provides the ability to create a scene, a camera and a geometric cube, and add that cube to the scene. A security vulnerability exists in Three. The vulnerability stems from the handling of rgb and hsl colors. The...