AlmaLinux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs (ALMALINUX9.6:CLSA-2026:1787058577)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787058577 advisory. - A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, the plugin allocates memory for a row table...

CVE-2026-50291 OpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399)

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and 3.1.11.0, processing a crafted BMP file through oiiotool or an application linked to OpenImageIO can reach BMP palette handling in...

Linux Distros Unpatched Vulnerability : CVE-2026-59985

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.2.0 through...

CVE-2026-59985: Out-of-bounds Read

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.2.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable on ILP32 builds to a heap out-of-bounds read. The issue occurs when ...

CVE-2026-66757: Integer Overflow or Wraparound

A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, the plugin allocates memory for a row table. The image header dimensions ysize and zsize are read as 16-bit unsigned integers. If a crafted file sets both dimensions to their maximum value 65535, the...

CVE-2013-3247

Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE compressed layer in an XCF file...

Heap overflow

Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE compressed layer in an XCF file...

CVE-2013-3247

Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE compressed layer in an XCF file...

CVE-2013-3247

CVE-2013-3247 is a heap-based buffer overflow in XnView (xnview.exe) prior to 2.03. It can be triggered by a crafted RLE-compressed layer in an XCF file, allowing remote code execution on the affected host. Remediation: upgrade to XnView 2.03 or later (as specified). Exploit details beyond the de...

PT-2014-2918

Name of the Vulnerable Software and Affected Versions Autodesk SketchBook for Enterprise versions prior to 6.25 Autodesk SketchBook Pro versions prior to 6.25 Autodesk SketchBook Express versions prior to 6.25 Autodesk SketchBook Copic Edition versions prior to 2.0.2 Description The issue allows...

CVE-2013-5365: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file...

PT-2013-4253

Name of the Vulnerable Software and Affected Versions XnView versions prior to 2.03 Description The issue is related to a heap-based buffer overflow in the xnview.exe module when decompressing RLE compressed layers of XCF files. This can be exploited by remote attackers to execute arbitrary code...

CVE-2012-5904

Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image...

Heap overflow

Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image...

CVE-2012-5904

Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image...

CVE-2012-5904

CVE-2012-5904 describes a heap-based buffer overflow in IrfanView prior to 4.33 that can be triggered by processing a crafted RLE-compressed bitmap (DIB/RLE/BMP). The issue allows remote code execution and arises from the way the application handles RLE bitmap data. Public references (NVD, CVE li...

PT-2012-6185

Name of the Vulnerable Software and Affected Versions IrfanView versions prior to 4.33 Description A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file, such as a DIB, RLE, or BMP image. Recommendations For versions prior to...

CVE-2012-5904: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image...

Adobe Reader BMP ColorData Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the Bitmap parsing component...

Wireshark ENTTEC DMX Data RLE Buffer Overflow Vulnerability (Windows)

This host is installed with Wireshark and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkenttecdmxdatarlebofvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ Wireshark ENTTEC DMX Data RLE Buffer Overflow Vulnerability Windows Authors: Sooraj KS Copyright:...