DEBIAN-CVE-2022-41794

A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. A specially-crafted PSD file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

Heap overflow

A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. A specially-crafted PSD file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2022-41794

A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. A specially-crafted PSD file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

UBUNTU-CVE-2022-41794

A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. A specially-crafted PSD file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

JetWidgets For Elementor < 1.0.14 - Contributor+ Stored XSS via Shortcode

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks jw-posts showimage='yes'...

CVE-2022-39907

CVE-2022-39907 affects Samsung decoding library used in Samsung Mobile devices. The issue is an integer overflow in the library that handles video thumbnails, enabling a local attacker to trigger an out-of-bounds write. Impact is described as high (confidentiality/integiry/availability concerns)....

PT-2022-25100 · Samsung · Samsung Decoding Library

Name of the Vulnerable Software and Affected Versions: Samsung decoding library versions prior to SMR Dec-2022 Release 1 Description: The issue is related to an integer overflow in the Samsung decoding library, specifically affecting the handling of video thumbnails. This allows a local attacker ...

USN-5736-1: ImageMagick vulnerabilities

It was discovered that ImageMagick incorrectly handled certain values when processing PDF files. If a user or automated system using ImageMagick were tricked into opening a specially crafted PDF file, an attacker could exploit this to cause a denial of service. This issue only affected Ubuntu 14....

libraw:libraw_nef_fuzzer: Heap-buffer-overflow in LibRaw::kodak_rgb_load_raw

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4732608429031424 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawneffuzzer Job Type: libfuzzerasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

libraw:libraw_nef_fuzzer: Heap-buffer-overflow in LibRaw::kodak_rgb_load_raw

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6646042577993728 Project: libraw Fuzzing Engine: afl Fuzz Target: librawneffuzzer Job Type: aflasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x63300001b780 Cras...

PT-2022-7116

Name of the Vulnerable Software and Affected Versions OpenImageIO version 2.3.19.0 Description A heap-based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code. This issue can be triggered by a specially-crafted PSD file, potentially leading to arbitrary code execution...

Fedora: Security Advisory for ImageMagick (FEDORA-2022-776925f086)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

tifig 代码问题漏洞

tifig is a fast HEIF image converter for thumbnails from Monostream open source. A code issue vulnerability exists in tifig version v0.2.2, which stems from a memory segment exception in the getType function in its /common/bbox.cpp component...

Blender 安全漏洞

Blender is a professional free and open source 3D computer graphics software. A security vulnerability exists in Blender that stems from a logic error, Blender-thumnailing infinite loop...

PT-2022-18948

Name of the Vulnerable Software and Affected Versions Blender version 3.3.0 Description A flaw in the software may cause an integer overflow in the blendthumb extract.cc file, potentially leading to a program crash or memory corruption. Specifically, when a loaded and valid image is crafted to...

Blender 缓冲区错误漏洞

Blender is a specialized free and open source 3D computer graphics software. A buffer error vulnerability exists in Blender that stems from an out-of-bounds read or write that occurs when an image is converted to a vertically flipped thumbnail...

WordPress Plugin AJAX Thumbnail Rebuild 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

Malicious code in component-thumbnail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76a23a84ff0f02b841e60133fc4054180ea026a36b009826b23ab7b87adaf47e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2145 Malicious code in component-thumbnail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76a23a84ff0f02b841e60133fc4054180ea026a36b009826b23ab7b87adaf47e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OPENSUSE-SU-2022:10001-1 Security update for pcmanfm

This update for pcmanfm fixes the following issues: update to 1.3.2: Fixed case when some keyboard shortcuts stopped working: Alt+Home, Alt+Up Fixed sytem reboot delayed for 90 seconds in some cases new upstream release of pcmanfm 1.3.1 fixed crash on reload while directory changes changed size o...