Lucene search
K

12 matches found

NVD
NVD
added 2026/05/19 8:16 p.m.11 views

CVE-2026-32740

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow write vulnerability in the grid tile compositing, allowing an attacker to write 64 bytes of fully attacker-controlled data past the end of a chroma plane heap allocation by craftin...

8.8CVSS0.00015EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2026/05/19 8:16 p.m.2 views

CVE-2026-32740

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow write vulnerability in the grid tile compositing, allowing an attacker to write 64 bytes of fully attacker-controlled data past the end of a chroma plane heap allocation by craftin...

8.8CVSS5.9AI score0.00015EPSS
Exploits1References3
EUVD
EUVD
added 2026/05/19 7:22 p.m.8 views

EUVD-2026-30978

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow write vulnerability in the grid tile compositing, allowing an attacker to write 64 bytes of fully attacker-controlled data past the end of a chroma plane heap allocation by craftin...

8.8CVSS5.8AI score0.00015EPSS
Exploits1References2
AlpineLinux
AlpineLinux
added 2026/05/19 7:22 p.m.9 views

CVE-2026-32740

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow write vulnerability in the grid tile compositing, allowing an attacker to write 64 bytes of fully attacker-controlled data past the end of a chroma plane heap allocation by craftin...

8.8CVSS5.8AI score0.00015EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/05/19 12:0 a.m.6 views

PT-2026-42003

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.22.0 Description A heap-buffer-overflow write exists in the grid tile compositing of the HEIF and AVIF file format decoder and encoder. An attacker can write 64 bytes of controlled data past the end of a chroma plan...

8.8CVSS5.8AI score0.00037EPSS
Exploits1References21
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-36083

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE. CVE-2021-36083 Note that Nessus relies on the presence...

5.5CVSS6.1AI score0.0038EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:1 a.m.3 views

SUSE CVE-2016-5139

Multiple integer overflows in the opjtcdinittile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JPEG 2000 data...

7.6CVSS9.6AI score0.01487EPSS
Exploits0References7
OSV
OSV
added 2021/11/10 7:33 p.m.1 views

GHSA-2P25-55C9-H58Q Overflow/crash in `tf.tile` when tiling tensor is large

Impact If tf.tile is called with a large input argument then the TensorFlow process will crash due to a CHECK-failure caused by an overflow. python import tensorflow as tf import numpy as np tf.keras.backend.tilex=np.ones1,1,1, n=100000000,100000000, 100000000 The number of elements in the output...

6.8CVSS6AI score0.00049EPSS
Exploits1References8
OSV
OSV
added 2021/11/05 8:15 p.m.0 views

PYSEC-2021-806

TensorFlow is an open source platform for machine learning. In affected versions if tf.tile is called with a large input argument then the TensorFlow process will crash due to a CHECK-failure caused by an overflow. The number of elements in the output tensor is too much for the int64t type and th...

5.5CVSS6.2AI score0.00049EPSS
Exploits1References3
PyPA
PyPA
added 2021/11/05 8:15 p.m.4 views

PYSEC-2021-806

TensorFlow is an open source platform for machine learning. In affected versions if tf.tile is called with a large input argument then the TensorFlow process will crash due to a CHECK-failure caused by an overflow. The number of elements in the output tensor is too much for the int64t type and th...

5.5CVSS7.2AI score0.00049EPSS
Exploits1References3Affected Software1
PyPA
PyPA
added 2021/11/05 8:15 p.m.4 views

PYSEC-2021-608

TensorFlow is an open source platform for machine learning. In affected versions if tf.tile is called with a large input argument then the TensorFlow process will crash due to a CHECK-failure caused by an overflow. The number of elements in the output tensor is too much for the int64t type and th...

5.5CVSS7.2AI score0.00049EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2021/11/05 12:0 a.m.1 views

PT-2021-23170 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.7.0 TensorFlow versions 2.6.1 and earlier TensorFlow versions 2.5.2 and earlier TensorFlow versions 2.4.4 and earlier Description: In affected versions, if tf.tile is called with a large input argument, then the...

6.8CVSS5.4AI score0.00049EPSS
Exploits1References15
Rows per page
Query Builder