509 matches found
CVE-2021-40892
A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-color v2.1.0 when handling crafted invalid rgba strings...
CVE-2021-40892
CVE-2021-40892 affects validate-color version 2.1.0. A Regular Expression Denial of Service (ReDoS) occurs when handling crafted invalid rgb(a) strings, attributed to the validateHTMLColorRgb pathway. Impact described as denial of service; no explicit exploit details beyond input crafting. No con...
OESA-2022-1723 giflib security update
giflib is a library of gif images and provides utilities for processing images. Security Fixes: There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB in gif2rgb.c:298:45.CVE-2022-28506...
CVE-2021-40892: Inefficient Regular Expression Complexity
A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-color v2.1.0 when handling crafted invalid rgba strings...
validate-color security vulnerability
validate-color is a Norwegian Wallace Sidhrée personal developer for validating HTML colors. A denial of service vulnerability exists in validate-color version v2.1.0, which can be exploited to cause a Regular Expression Denial of Service ReDOS by an attacker who fails to properly handle a crafte...
CVE-2021-46822
A heap-based buffer overflow vulnerability was found in libjpeg-turbo in the getwordrgbrow function in rdppm.c. The flaw occurs when the PPM reader in libjpeg-turbo mishandles use of the tjLoadImage function for loading a 16-bit binary PPM file into a grayscale uncompressed image buffer and then...
CVE-2021-46822
The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the getwordrgbrow function in rdppm.c...
DEBIAN-CVE-2021-46822
The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the getwordrgbrow function in rdppm.c...
UBUNTU-CVE-2021-46822
The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the getwordrgbrow function in rdppm.c...
CVE-2021-46822
The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the getwordrgbrow function in rdppm.c...
CVE-2021-41413
ok-file-formats master 2021-9-12 is affected by a buffer overflow in okjpgconvertdataunitgrayscale and okjpgconvertYCbCrtoRGB...
CVE-2021-41413
ok-file-formats master 2021-9-12 is affected by a buffer overflow in okjpgconvertdataunitgrayscale and okjpgconvertYCbCrtoRGB...
ok-file-formats security vulnerabilities
ok-file-formats is an open source decoder for PNG, JPEG, WAV and some other file formats. A security vulnerability exists in ok-file-formats master version 2021-9-12, which stems from a buffer overflow issue in okjpgconvertdataunitgrayscale and okjpgconvertYCbCrtoRGB...
PT-2022-11392
Name of the Vulnerable Software and Affected Versions ok-file-formats version master 2021-9-12 Description The issue is related to a buffer overflow in the ok jpg convert data unit grayscale and ok jpg convert YCbCr to RGB functions. Recommendations For ok-file-formats version master 2021-9-12,...
Malicious code in colors-rgb (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 072b4a8d033d3e9f88fb91aecb273d4e607330d0cea85ed494344c0f396b53a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2017 Malicious code in colors-rgb (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 072b4a8d033d3e9f88fb91aecb273d4e607330d0cea85ed494344c0f396b53a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-22137
A memory corruption vulnerability exists in the iocamysrgballocate functionality of Accusoft ImageGear 19.10. A specially-crafted malformed file can lead to an arbitrary free. An attacker can provide a malicious file to trigger this vulnerability...
PT-2022-15266
Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.10 Description A memory corruption issue exists in the ioca mys rgb allocate functionality. This can be triggered by a specially-crafted malformed file, leading to an arbitrary free. An attacker can exploit this b...