Lucene search
K

26 matches found

RedhatCVE
RedhatCVE
added 2026/02/23 11:14 a.m.6 views

CVE-2026-2913

A flaw was found in libvips. A local attacker could exploit a heap-based buffer overflow vulnerability in the vipssourcereadtomemory function when processing custom seekable sources larger than 4 Gigabytes GiB. While the direct impact on libvips is negligible, this flaw could lead to a crash in t...

7CVSS4.9AI score0.00026EPSS
Exploits1References11
Snyk
Snyk
added 2026/02/22 6:56 a.m.3 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the vipssourcereadtomemory function. An attacker can cause a crash or disrupt service by providing a specially crafted custom seekable source larger than 4 GiB, leading to a heap-based buffer overflow...

7CVSS5.8AI score0.00026EPSS
Exploits1References2
OSV
OSV
added 2026/02/22 4:15 a.m.3 views

CVE-2026-2913

A vulnerability was determined in libvips up to 8.19.0. The affected element is the function vipssourcereadtomemory of the file libvips/iofuncs/source.c. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The attack's complexity is rated as...

7CVSS5AI score
Exploits0References8
Cvelist
Cvelist
added 2026/02/22 4:2 a.m.22 views

CVE-2026-2913 libvips source.c vips_source_read_to_memory heap-based overflow

A vulnerability was determined in libvips up to 8.19.0. The affected element is the function vipssourcereadtomemory of the file libvips/iofuncs/source.c. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The attack's complexity is rated as...

2.5CVSS0.00026EPSS
Exploits1References8
RedhatCVE
RedhatCVE
added 2026/01/28 9:17 a.m.5 views

CVE-2026-24807

Improper Verification of Cryptographic Signature vulnerability in liuyueyi quick-media plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/util modules. This vulnerability is associated with program files SeekableOutputStream.Java. This issue affects quick-media:...

5.3CVSS5.9AI score0.00015EPSS
Exploits0References1
Snyk
Snyk
added 2026/01/27 9:30 a.m.2 views

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via improper validation in the SeekableOutputStream process. An attacker can cause memory corruption or execute arbitrary code by providing specially crafted PNG files. Remediation A fix was pushed into th...

5.4CVSS6.2AI score0.00015EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2026/01/27 9:30 a.m.11 views

Quick-Media Batik Codec FIX Package has Buffer Overflow Vulnerability in PNG Codec

Improper Verification of Cryptographic Signature vulnerability in liuyueyi quick-media plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/util modules. This vulnerability is associated with program files SeekableOutputStream.Java. This issue affects all versions...

5.3CVSS5.9AI score0.00015EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/27 8:43 a.m.1 views

CVE-2026-24807 Buffer Overflow Vulnerability in liuyueyi/quick-media

Improper Verification of Cryptographic Signature vulnerability in liuyueyi quick-media plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/util modules. This vulnerability is associated with program files SeekableOutputStream.Java. This issue affects quick-media:...

5.3CVSS5.9AI score0.00015EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/27 8:43 a.m.28 views

CVE-2026-24807 Buffer Overflow Vulnerability in liuyueyi/quick-media

Improper Verification of Cryptographic Signature vulnerability in liuyueyi quick-media plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/util modules. This vulnerability is associated with program files SeekableOutputStream.Java. This issue affects quick-media:...

5.3CVSS0.00015EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/27 8:43 a.m.4 views

CVE-2026-24807

Improper Verification of Cryptographic Signature vulnerability in liuyueyi quick-media plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/util modules. This vulnerability is associated with program files SeekableOutputStream.Java. This issue affects quick-media:...

5.3CVSS5.9AI score0.00015EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/27 8:43 a.m.2 views

EUVD-2026-4759

Improper Verification of Cryptographic Signature vulnerability in liuyueyi quick-media plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/util modules. This vulnerability is associated with program files SeekableOutputStream.Java. This issue affects quick-media:...

5.3CVSS5.9AI score0.00015EPSS
Exploits0References1
CVE
CVE
added 2026/01/27 8:43 a.m.8 views

CVE-2026-24807

CVE-2026-24807 affects liuyueyi quick-media (before v1.0), specifically the SeekableOutputStream.java path under plugins/svg-plugin/batik-codec-fix. The issue is described as Improper Verification of Cryptographic Signature, with root cause in verification flow, and multiple feeds show impact var...

5.3CVSS5.9AI score0.00015EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/01/27 12:0 a.m.4 views

PT-2026-4882

Improper Verification of Cryptographic Signature vulnerability in liuyueyi quick-media plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/util modules. This vulnerability is associated with program files SeekableOutputStream.Java. This issue affects quick-media:...

5.3CVSS5.9AI score0.00015EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-3070

Malware in sbrugna...

8.8CVSS6.9AI score0.00442EPSS
Exploits0References9
OSV
OSV
added 2024/01/12 11:6 a.m.2 views

OESA-2024-1055 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: An issue was discovered in the function gdevprnopenprinterseekable in Artifex Ghostscript through 10.02.0 allows...

7.5CVSS7.1AI score0.00111EPSS
Exploits0References2
OSV
OSV
added 2023/12/29 11:6 a.m.1 views

OESA-2023-1984 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: An issue was discovered in the function gdevprnopenprinterseekable in Artifex Ghostscript through 10.02.0 allows...

7.5CVSS7.1AI score0.00111EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/12/08 3:40 a.m.1 views

SUSE CVE-2023-46751

An issue was discovered in the function gdevprnopenprinterseekable in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer...

7.5CVSS7AI score0.00111EPSS
Exploits0References7
OSV
OSV
added 2023/12/06 8:15 p.m.1 views

DEBIAN-CVE-2023-46751

An issue was discovered in the function gdevprnopenprinterseekable in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer...

7.5CVSS7.7AI score0.00111EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/12/06 8:15 p.m.1 views

CVE-2023-46751

An issue was discovered in the function gdevprnopenprinterseekable in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer...

7.5CVSS7.2AI score0.00111EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:42 a.m.3 views

SUSE CVE-2017-11449

coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via an image received from stdin...

5.6CVSS9.7AI score0.00442EPSS
Exploits0References6
Rows per page
Query Builder