Astra Linux – Vulnerability in gst-plugins-bad1.0

GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability, but the attack vectors...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the dolayersurface process when pixel index values from decoded XCF tile data are used directly as colormap indices without validation against the colormap size. An attacker can cause heap out-of-bounds reads and...

EUVD-2022-27029

Malicious code in bioql PyPI...

SUSE CVE-2023-29408

The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image both in terms of pixel width/height, and encoded size to make the decoder decode large amounts of compressed data, consuming excessive memory and CPU...

Golang TIFF decoder does not place a limit on the size of compressed tile data

The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image both in terms of pixel width/height, and encoded size to make the decoder decode large amounts of compressed data, consuming excessive memory and CPU...

DEBIAN-CVE-2023-29408

The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image both in terms of pixel width/height, and encoded size to make the decoder decode large amounts of compressed data, consuming excessive memory and CPU...

UBUNTU-CVE-2023-29408

The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image both in terms of pixel width/height, and encoded size to make the decoder decode large amounts of compressed data, consuming excessive memory and CPU...

CVE-2023-29408 Excessive resource consumption in golang.org/x/image/tiff

The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image both in terms of pixel width/height, and encoded size to make the decoder decode large amounts of compressed data, consuming excessive memory and CPU...

CVE-2022-21873

Tile Data Repository Elevation of Privilege Vulnerability...

CVE-2022-21873

Tile Data Repository Elevation of Privilege Vulnerability...

CVE-2022-21873

Tile Data Repository Elevation of Privilege Vulnerability...

Privilege escalation

Tile Data Repository Elevation of Privilege Vulnerability...

CVE-2022-21873 Tile Data Repository Elevation of Privilege Vulnerability

...

CVE-2022-21873 Tile Data Repository Elevation of Privilege Vulnerability

...

CVE-2022-21873

Technical details for CVE-2022-21873 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are stated here; monitor for updates.

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in the Microsoft Windows Tile Data Repository with privilege permission and access control issues. The following products and editions are affected: Windows 10...

PT-2022-15175 · Unknown +1 · Tile Data Repository +1

Name of the Vulnerable Software and Affected Versions: Tile Data Repository affected versions not specified Description: The issue is an elevation-of-privilege vulnerability that allows attackers to affect the system. No information is provided about the estimated number of potentially affected...

The vulnerability of the writeTileData function in the OpenEXR library, related to writing beyond the buffer boundary, allows a attacker to cause a service failure.

The vulnerability of the writeTileData function in the OpenEXR library lies in the issue of writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

PT-2020-6260 · Openexr +5 · Openexr +5

Name of the Vulnerable Software and Affected Versions: OpenEXR version 2.3.0 Description: A head-based buffer overflow exists in the writeTileData function of OpenEXR that can cause a denial of service via a crafted EXR file. This issue is related to writing beyond the boundaries of a buffer...

CVE-2020-1159

An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...