python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in expandrow/expandrow2

An out-of-bounds read/write flaw was found in python-pillow, in the way SGI RLE images are decoded. An application that uses python-pillow to decode untrusted images may be vulnerable. This flaw allows an attacker to crash the application or potentially execute code on the system. The highest...

UBUNTU-CVE-2020-11538

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311...

PT-2020-12675 · Pillow +5 · Pillow +5

Name of the Vulnerable Software and Affected Versions: Pillow versions prior to 7.0.1 Description: The issue exists in the parsing of SGI image files, where a number of out-of-bounds reads are present in the libImaging/SgiRleDecode.c module. Recommendations: For versions prior to 7.0.1, update to...

CVE-2019-15218

A flaw was found in the Linux kernel's Siano Mobile Silicon MDTV receiver driver. An attacker, with physical access and a specially crafted USB device, can exploit this vulnerability, creating a NULL pointer dereference and causing the system to crash. The highest threat from this vulnerability i...

ImageMagick: heap-based buffer overflow in WriteSGIImage in coders/sgi.c

A heap-based buffer overflow flaw was discovered in ImageMagick when writing SGI images with improper columns and rows properties. An attacker may trick a victim user into downloading a malicious image file and running it through ImageMagick, possibly executing code onto the victim user's system...

python-pillow: out-of-bounds write in expandrow in libImaging/SgiRleDecode.c

An out-of-bounds write flaw was discovered in python-pillow in the way SGI RLE images are decoded. An application that uses python-pillow to decode untrusted images may be vulnerable to this flaw, which can allow an attacker to crash the application or potentially execute code on the system...

CVE-2015-5466

CVE-2015-5466 affects Silicon Integrated Systems’ XGI VGA Display Manager (XGI VGA Display Manager) version 6.14.10.1090 on Windows XP SP3. A vulnerability in the xrvkp module allows an attacker to perform an arbitrary write (write-what-where) via IOCTL 0x96002404, enabling privilege escalation b...

ALPINE-CVE-2020-5311

libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow...

PYSEC-2020-82

libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow...

openSUSE Security Update : the Linux Kernel (openSUSE-2019-2507)

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2019-0154: An unprotected read access to i915 registers has been fixed that could have been abused to facilitate a local denial-of-service attack. bsc1135966 -...

IoT security will set innovation free: Azure Sphere general availability scheduled for February 2020

Today, at the IoT Solutions World Congress, we announced that Azure Sphere will be generally available in February of 2020. General availability will mark our readiness to fulfill our security promise at scale, and to put the power of Microsoft’s expertise to work for our customers every day—by...

Silicon Graphics LibTIFF Integer Overflow Vulnerability (CNVD-2020-13553)

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files.GDAL is an open source geospatial data abstraction library . An integer overflow vulnerabilit...

The vulnerability of the Platform Sample/Silicon Reference processor components of Intel Core processors allows a hacker to execute arbitrary code.

The vulnerability of the Platform Sample/Silicon Reference processors of Intel Core relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Improper access control

Insufficient access control in silicon reference firmware for IntelR XeonR Scalable Processor, IntelR XeonR Processor D Family may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

The vulnerability of microprogramming software in Intel Core Platform Sample/Silicon Reference processors, related to deficiencies in access control, allows attackers to enhance their privileges.

The vulnerability of Microprogramming Software in Intel Core Platform Sample/Silicon Reference processors is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Platform Sample/Silicon Reference processors of Intel Core, related to access control flaws, allows attackers to execute arbitrary code.

The vulnerability of the Platform Sample/Silicon Reference processors of Intel Core relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Platform Sample/Silicon Reference component in server hardware from Intel(R) Server Board, Intel(R) Server System, and Intel(R) Compute Module stems from deficiencies in access control. This allows attackers to execute arbitrary code.

The vulnerability of the Platform Sample/Silicon Reference component in server hardware from IntelR Server Board, IntelR Server System, and IntelR Compute Module is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Input validation

Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation IntelR Coretm Processor, 7th Generation IntelR Coretm Processor may allow an unauthenticated user to potentially enable an escalation of privilege via physical access...

UBUNTU-CVE-2018-12204

Improper memory initialization in Platform Sample/Silicon Reference firmware IntelR Server Board, IntelR Server System and IntelR Compute Module may allow privileged user to potentially enable an escalation of privilege via local access...

CVE-2018-12202

Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation IntelR Core Processor, 7th Generation IntelR Core Processor may allow privileged user to potentially leverage existing features via local access...