Lucene search
K

112 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в libpng1.6

LIBPNG is a reference library used in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Starting from version 1.6.0 until 1.6.51, there was a heap buffer over-read vulnerability in the libpng’s pngwriteimage8bit function when processing 8-bit images...

6.1CVSS6.4AI score0.0002EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2026/05/15 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-43909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0...

8.8CVSS5.9AI score0.00042EPSS
Exploits1References3
Snyk
Snyk
added 2026/05/14 9:22 p.m.5 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the SwapRGBABytes process. An attacker can trigger out-of-bounds memory access by supplying a specially crafted kABGR DPX image with large dimensions, leading to potential reading from or writing to unintended...

8.8CVSS5.8AI score0.00042EPSS
Exploits1References2
EUVD
EUVD
added 2026/05/14 7:0 p.m.2 views

EUVD-2026-30415

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a signed 32-bit integer overflow in the loop index expression i 4 inside SwapRGBABytes causes the function to compute a large negative...

8.8CVSS5.9AI score0.00042EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/05/14 7:0 p.m.3 views

CVE-2026-43909 OpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoder

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a signed 32-bit integer overflow in the loop index expression i 4 inside SwapRGBABytes causes the function to compute a large negative...

8.8CVSS5.9AI score0.00042EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/05/14 12:0 a.m.4 views

PT-2026-41028

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a signed 32-bit integer overflow in the loop index expression i 4 inside SwapRGBABytes causes the function to compute a large negative...

8.8CVSS5.9AI score0.00042EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2026/04/09 1:21 p.m.0 views

libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service

A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service...

7.5CVSS6.6AI score0.00737EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2026/04/08 2:9 p.m.1 views

libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service

A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service...

7.5CVSS6.7AI score0.00737EPSS
Exploits0References6
OSV
OSV
added 2025/11/25 12:15 a.m.5 views

AZL-70897 CVE-2025-64506 affecting package fltk 1.3.5-4

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's pngwriteimage8bit function when processing 8-bit images through t...

6.1CVSS6.2AI score0.0002EPSS
Exploits2References1
AlpineLinux
AlpineLinux
added 2025/11/24 11:41 p.m.10 views

CVE-2025-64506

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's pngwriteimage8bit function when processing 8-bit images through t...

6.1CVSS7.3AI score0.0002EPSS
Exploits2References3
Vulnrichment
Vulnrichment
added 2025/11/24 11:41 p.m.3 views

CVE-2025-64506 LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's pngwriteimage8bit function when processing 8-bit images through t...

6.1CVSS7AI score0.0002EPSS
Exploits2References3
CVE
CVE
added 2025/11/24 11:41 p.m.16 views

CVE-2025-64506

LIBPNG CVE-2025-64506 is a heap over-read vulnerability in png_write_image_8bit when convert_to_8bit is enabled (versions 1.6.0 through before 1.6.51). It affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data; a conditional guard allows 8-bit input to enter code path expect...

6.1CVSS7AI score0.0002EPSS
Exploits2References3Affected Software1
Debian CVE
Debian CVE
added 2025/11/24 11:41 p.m.4 views

CVE-2025-64506

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's pngwriteimage8bit function when processing 8-bit images through t...

6.1CVSS6.3AI score0.0002EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2025/10/15 12:0 a.m.7 views

Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2025-1215)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1215 advisory. Write-What-Where in libtiff via TIFFReadRGBAImageOriented CVE-2025-9900 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus has no...

8.8CVSS5.9AI score0.00039EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2019-7895

Malware in sbrugna...

8.8CVSS7.4AI score0.00373EPSS
Exploits0References19
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2013-4447

Malware in sbrugna...

4.3CVSS5.7AI score0.02921EPSS
Exploits1References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-8541

Malware in sbrugna...

8.8CVSS9.1AI score0.08002EPSS
Exploits1References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-8937

Malware in sbrugna...

7.8CVSS7.7AI score0.00312EPSS
Exploits0References10
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2019-17546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tifgetimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer...

8.8CVSS7AI score0.00373EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2020-35654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF i...

8.8CVSS7.4AI score0.00199EPSS
Exploits0References2
Rows per page
Query Builder