GIFLIB Security Vulnerability

GIFLIB is a library for reading and editing gif images. A security vulnerability exists in GIFLIB version 5.2.1, which originated from a vulnerability that allows local attackers to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c. The vulnerability is caused by the use o...

CVE-2023-32638

Incorrect default permissions in some Intel Arc RGB Controller software before version 1.06 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Incorrect default permissions in some Intel Arc RGB Controller software before version 1.06 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32638

Summary: CVE-2023-32638 is a privilege-escalation vulnerability in Intel Arc RGB Controller software prior to version 1.06. The root issue is improper default permissions that could allow an authenticated user to escalate privileges via local access. The NVD/NIST entry shows a High impact with lo...

CVE-2023-32638

Incorrect default permissions in some Intel Arc RGB Controller software before version 1.06 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32638

Incorrect default permissions in some Intel Arc RGB Controller software before version 1.06 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32638: Incorrect Default Permissions

Incorrect default permissions in some Intel Arc RGB Controller software before version 1.06 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-23926 · Intel · Intel Arc Rgb Controller

Name of the Vulnerable Software and Affected Versions: Intel Arc RGB Controller versions prior to 1.06 Description: The issue is related to incorrect default permissions in the software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

UBUNTU-CVE-2023-40575

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the generalYUV444ToRGB8uP3AC4RBGRX function. This issue is likely down to insufficient data for the pSrc variable and results in crashe...

rgb.com.br Cross Site Scripting vulnerability OBB-3427440

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2023-1733)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.0 : libjpeg-turbo (EulerOS-SA-2023-1733)

According to the versions of the libjpeg-turbo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a...

OpenEXR RGBtoXYZ Component Heap Buffer Overflow DoS

The vulnerability in the ImfChromaticities.cpp component of the RGBtoXYZ function for OpenEXR images with a wide dynamic range is related to incorrect handling of the division operation. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...

Medium: openexr

Issue Overview: A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability. CVE-2021-20304 An integer...

imagemagick:enhance_fuzzer: Use-of-uninitialized-value in Op_YCbCr_to_RGB<unsigned char>::convert_colorspace

Detailed Report: https://oss-fuzz.com/testcase?key=5183303361888256 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: OpYCbCrtoRGB::convertcolorspace...

SUSE CVE-2006-2120

The TIFFToRGB function in libtiff before 3.8.1 allows remote attackers to cause a denial of service crash via a crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values, which triggers an out-of-bounds read...

SUSE CVE-2010-2595

The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid ReferenceBlackWhite values, which allows remote attackers to cause a denial of service application crash via a crafted TIFF image that triggers an array index error, related to...

SUSE CVE-2016-1619

Multiple integer overflows in the 1 sycc422torgb and 2 sycc444torgb functions in fxcodec/codec/fxcodecjpxopj.cpp in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted...

SUSE CVE-2016-1651

fxcodec/codec/fxcodecjpxopj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does not properly implement the sycc420torgb and sycc422torgb functions, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service out-of-bounds read via...

SUSE CVE-2017-2888

An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a...