EUVD-2022-38873

Malicious code in bioql PyPI...

CVE-2022-36151

tifig v0.2.2 was discovered to contain a segmentation violation via getType at /common/bbox.cpp...

CVE-2022-36152

tifig v0.2.2 was discovered to contain a memory leak via operator new at /asan/asannewdelete.cpp...

CVE-2022-36149

tifig v0.2.2 was discovered to contain a heap-use-after-free via temInfoEntry...

CVE-2022-36150

tifig v0.2.2 was discovered to contain a heap-buffer overflow via asanmemmove at /asan/asaninterceptorsmemintrinsics.cpp...

CVE-2022-36153

tifig v0.2.2 was discovered to contain a segmentation violation via std::vector ::size const at /bits/stlvector.h...

CVE-2022-36151

tifig v0.2.2 was discovered to contain a segmentation violation via getType at /common/bbox.cpp...

Code injection

tifig v0.2.2 was discovered to contain a segmentation violation via std::vector ::size const at /bits/stlvector.h...

Design/Logic Flaw

tifig v0.2.2 was discovered to contain a resource allocation issue via operator newunsigned long at asannewdelete.cpp...

Heap overflow

tifig v0.2.2 was discovered to contain a heap-buffer overflow via asanmemmove at /asan/asaninterceptorsmemintrinsics.cpp...

Memory corruption

tifig v0.2.2 was discovered to contain a memory leak via operator new at /asan/asannewdelete.cpp...

Code injection

tifig v0.2.2 was discovered to contain a segmentation violation via getType at /common/bbox.cpp...

CVE-2022-36153

CVE-2022-36153 affects tifig v0.2.2, where a segmentation violation can occur through the use of std::vector::size() in /bits/stl_vector.h. The issue is documented across multiple sources (NVD entry and Red Hat/OSV/CVE lists) consistently describing a memory/segmentation fault in tifig 0.2.2. The...

CVE-2022-36153

tifig v0.2.2 was discovered to contain a segmentation violation via std::vector ::size const at /bits/stlvector.h...

CVE-2022-36151

tifig v0.2.2 was discovered to contain a segmentation violation via getType at /common/bbox.cpp...

CVE-2022-36151

CVE-2022-36151 affects tifig v0.2.2, with a segmentation/ crash via getType() in /common/bbox.cpp. Affected component: tifig (HEIF thumbnail converter). Root cause: memory access error in getType(); exploit status not detailed in the provided docs. Impact per CVSS: local access, user interaction ...

CVE-2022-36151

tifig v0.2.2 was discovered to contain a segmentation violation via getType at /common/bbox.cpp...

CVE-2022-36150

tifig v0.2.2 was discovered to contain a heap-buffer overflow via asanmemmove at /asan/asaninterceptorsmemintrinsics.cpp...

CVE-2022-36150

tifig v0.2.2 was discovered to contain a heap-buffer overflow via asanmemmove at /asan/asaninterceptorsmemintrinsics.cpp...

CVE-2022-36149

tifig v0.2.2 was discovered to contain a heap-use-after-free via temInfoEntry...