Lucene search
+L

42 matches found

OSV
OSV
•added 2026/08/25 5:17 p.m.•11 views

DEBIAN-CVE-2026-59186

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, a crafted tiled EXR can trigger a heap out-of-bounds write on 32-bit/ILP32 builds when read...

7.1CVSS6.1AI score0.00415EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/25 4:35 p.m.•51 views

CVE-2026-59186

OpenEXR , the reference implementation for the EXR image format widely used in the motion picture industry, is affected by a heap out-of-bounds write on 32-bit/ILP32 builds. A crafted tiled EXR file with a small 40×40 dataWindow but a 65537×65537 tile size, when read through the TiledRgbaInputFil...

7.1CVSS6.1AI score0.00415EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/07/30 4:45 p.m.•16 views

SUSE CVE-2026-46602

The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption...

7.5CVSS7.4AI score0.00609EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/25 9:16 p.m.•14 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the absence of a restriction on tile sizes in the TIFF image decoding process. An attacker can cause excessive memory consumption by providing a specially crafted image file wi...

7.5CVSS5.8AI score0.00609EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/25 9:16 p.m.•14 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the absence of a restriction on tile sizes in the TIFF image decoding process. An attacker can cause excessive memory consumption by providing a specially crafted image file wi...

7.5CVSS5.8AI score0.00609EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/25 8:17 p.m.•31 views

CVE-2026-46602

The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption...

7.5CVSS0.00609EPSS
SaveExploits0References3
OSV
OSV
•added 2026/06/25 8:17 p.m.•18 views

DEBIAN-CVE-2026-46602

The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption...

7.5CVSS7.4AI score0.00609EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/25 7:47 p.m.•52 views

CVE-2026-46602 Lack of limit on tile sizes in x/image/tiff in golang.org/x/image

The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption...

0.00609EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/06/25 7:47 p.m.•26 views

EUVD-2026-39551

The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption...

5.9AI score0.00609EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/06/25 7:47 p.m.•26 views

CVE-2026-46602

The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption...

5.9AI score0.00609EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/06/25 7:47 p.m.•15 views

CVE-2026-46602 Lack of limit on tile sizes in x/image/tiff in golang.org/x/image

The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption...

5.8AI score0.00609EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/06/25 7:47 p.m.•23 views

CVE-2026-46602

The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption...

7.5CVSS5.8AI score0.00609EPSS
SaveExploits0
OSV
OSV
•added 2026/04/03 10:14 a.m.•23 views

CLSA-2026-1775211239 openexr: Fix of 4 CVEs

CVE-2025-12495 CVE-2025-12839 CVE-2025-12840: fix heap buffer overflows in the C core decoding pipeline missing nread validation in exrreadchunk, missing packed/unpacked size check for uncompressed tiles, missing storagemode guard in chunk offset computation - CVE-2025-64181: fix use of...

7.8CVSS7.5AI score0.00382EPSS
SaveExploits1References1
OSV
OSV
•added 2025/10/31 11:09 a.m.•10 views

OESA-2025-2589 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

4.7CVSS5.6AI score0.00369EPSS
SaveExploits1References2
OSV
OSV
•added 2025/10/31 11:09 a.m.•7 views

OESA-2025-2587 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

4.7CVSS5.6AI score0.00369EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2025/10/29 12:23 a.m.•11 views

SUSE CVE-2025-62594

ImageMagick is a software suite to create, edit, compose, or convert bitmap images. ImageMagick versions prior to 7.1.2-8 are vulnerable to denial-of-service due to unsigned integer underflow and division-by-zero in the CLAHEImage function. When tile width or height is zero, unsigned underflow...

5.3CVSS5.6AI score0.00369EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2025/10/28 5:12 a.m.•23 views

CVE-2025-62594

A vulnerability in ImageMagick’s CLAHEImage function in MagickCore/enhance.c allows a zero tile width or height to trigger unsigned integer underflow and division-by-zero conditions. When tileinfo.height or tileinfo.width becomes zero, pointer arithmetic using these values can result in...

5.5CVSS5.7AI score0.00369EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/27 11:33 p.m.•17 views

EUVD-2025-36365

ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash DoS...

4.7CVSS5.8AI score0.00369EPSS
SaveExploits1References3
NVD
NVD
•added 2025/10/27 8:15 p.m.•11 views

CVE-2025-62594

ImageMagick is a software suite to create, edit, compose, or convert bitmap images. ImageMagick versions prior to 7.1.2-8 are vulnerable to denial-of-service due to unsigned integer underflow and division-by-zero in the CLAHEImage function. When tile width or height is zero, unsigned underflow...

5.5CVSS0.00369EPSS
SaveExploits1References2
OSV
OSV
•added 2025/10/27 8:15 p.m.•5 views

DEBIAN-CVE-2025-62594

ImageMagick is a software suite to create, edit, compose, or convert bitmap images. ImageMagick versions prior to 7.1.2-8 are vulnerable to denial-of-service due to unsigned integer underflow and division-by-zero in the CLAHEImage function. When tile width or height is zero, unsigned underflow...

5.5CVSS5.6AI score0.00369EPSS
SaveExploits1References1
Rows per page
Query Builder