CVE-2021-44335

David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurs in function okpngtransformscanline in "/okpng.c:533"...

PT-2022-12044

Name of the Vulnerable Software and Affected Versions ok-file-formats version 203defd Description The issue occurs when using the function of the ok-file-formats project, resulting in a heap-buffer-overflow in the ok png transform scanline function located in "/ok png.c:533". Recommendations For...

CVE-2021-44342

David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow via function okpngtransformscanline in "/okpng.c:494"...

CVE-2021-44342

David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow via function okpngtransformscanline in "/okpng.c:494"...

CVE-2021-44339

David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurred in function okpngtransformscanline in "/okpng.c:712"...

PT-2022-12047

Name of the Vulnerable Software and Affected Versions David Brackeen ok-file-formats version 203defd Description The issue is related to a Buffer Overflow that can occur via the function ok png transform scanline in the file "/ok png.c:494". This can potentially lead to exploitation...

ok-file-formats 缓冲区错误漏洞

ok-file-formats is an open source decoder for PNG, JPEG, WAV and several other file formats. ok-file-formats 203defd suffers from a buffer error vulnerability that allows an attacker to trigger a buffer overflow via the function okpngtransformscanline in /okpng.c:494...

PT-2022-12045

Name of the Vulnerable Software and Affected Versions David Brackeen ok-file-formats version 203defd Description The issue is related to a Buffer Overflow, specifically a heap-buffer-overflow, that occurs when using the function of the ok-file-formats project. This overflow happens in the ok png...

PT-2021-27835

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash involves the Imf 3 1::memstream read, dispatch read, and exr read...

openexr:openexr_exrcheck_fuzzer: Negative-size-param in Imf_3_1::memstream_read

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5235723234574336 Project: openexr Fuzzing Engine: honggfuzz Fuzz Target: openexrexrcheckfuzzer Job Type: honggfuzzasanopenexr Platform Id: linux Crash Type: Negative-size-param Cra...

graphicsmagick:coder_CALS_fuzzer: Use-of-uninitialized-value in Fax4Decode

Detailed Report: https://oss-fuzz.com/testcase?key=5904451320283136 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderCALSfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Fax4Decode TIFFReadScanlin...

SUSE SLES11 Security Update : OpenEXR (SUSE-SU-2021:14757-1)

The remote SUSE Linux SLES11 / SLESSAP11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14757-1 advisory. - Fixed CVE-2021-3479 bsc1184354: Out-of-memory caused by allocation of a very large buffer - Fixed CVE-2021-3605 bsc1187395: Heap...

UBUNTU-CVE-2021-3598

There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

OESA-2021-1167 OpenEXR security update

OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fixes: There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow ...

The vulnerability of the implementation of the file compression method using Zip scanning per scanline (ImfScanLineInputFile.cpp) in the OpenEXR library allows a hacker to cause a service failure.

The vulnerability of the Zip file compression method implemented using the scanline parameter ImfScanLineInputFile.cpp in the OpenEXR library is related to an uncontrolled resource consumption when processing the todata-linesInBuffer parameter. Exploiting this vulnerability could allow an attacke...

The vulnerability of the Scanline API interface in the OpenEXR library allows a hacker to trigger a service failure.

The vulnerability of the Scanline API interface of the OpenEXR library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure by creating specially crafted EXR files...

LIM OpenEXR Denial of Service Vulnerability (CNVD-2021-25721)

OpenEXR is an open-standard, high dynamic range image format that is widely used in computer graphics to store image data, but can also store some data needed for post-synthesis processing. A denial of service vulnerability exists in the Scanline input file feature in versions prior to LIM OpenEX...

LIM OpenEXR Denial of Service Vulnerability (CNVD-2021-25722)

OpenEXR is an open-standard, high dynamic range image format that is widely used in computer graphics to store image data, but can also store some data needed for post-synthesis processing. A denial of service vulnerability exists in the Scanline API functionality in versions prior to LIM OpenEXR...

CVE-2021-3478

There's a flaw in OpenEXR's scanline input file functionality in versions before 3.0.0-beta. An attacker able to submit a crafted file to be processed by OpenEXR could consume excessive system memory. The greatest impact of this flaw is to system availability...

AZL-44244 CVE-2021-3479 affecting package OpenEXR 2.3.0-6

There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger excessive consumption of memory, resulting in an impact to system availability...