PYSEC-2017-115

exiv2 0.26 contains a Stack out of bounds read in webp parser...

CVE-2017-1000126

exiv2 0.26 contains a Stack out of bounds read in webp parser...

CVE-2017-1000126

CVE-2017-1000126 affects exiv2 0.26 with a Stack out-of-bounds read in the WebP parser. Public advisories (openSUSE, Red Hat/Nessus plugins) confirm Exiv2 0.26 as vulnerable. The issue is fixed in newer exiv2 releases (openSUSE/SLE updates reference the 0.26 line being updated to address this). I...

CVE-2017-1000126

exiv2 0.26 contains a Stack out of bounds read in webp parser...

CVE-2017-1000126

exiv2 0.26 contains a Stack out of bounds read in webp parser...

CVE-2017-1000126: Out-of-bounds Read

exiv2 0.26 contains a Stack out of bounds read in webp parser...

PT-2017-19352

Name of the Vulnerable Software and Affected Versions exiv2 version 0.26 Description The issue is related to a Stack out of bounds read in the webp parser. Recommendations For exiv2 version 0.26, at the moment, there is no information about a newer version that contains a fix for this vulnerabili...

PT-2017-10828

Name of the Vulnerable Software and Affected Versions exiv2 version 0.26 Description The issue is related to a Stack out of bounds read in the webp parser. Recommendations For exiv2 version 0.26, at the moment, there is no information about a newer version that contains a fix for this vulnerabili...

ImageMagick memory leak vulnerability (CNVD-2017-25388)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the ReadWEBPImage of the coders/webp.c file in ImageMagick version 7.0.6-5. An...

ImageMagick Denial of Service Vulnerability (CNVD-2017-25387)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'ReadWEBPImage' function in the coders/webp.c file in ImageMagick...

CVE-2017-14137

ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header...

CVE-2017-14138

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors...

DEBIAN-CVE-2017-14137

ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header...

CVE-2017-14137

ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header...

CVE-2017-14138

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors...

ALPINE-CVE-2017-9994

libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pixfmt is set, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecifie...

DEBIAN-CVE-2017-9994

libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pixfmt is set, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecifie...

UBUNTU-CVE-2017-9994

libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pixfmt is set, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecifie...

FFmpeg 'libavcodec/webp.c' heap buffer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavcodec/webp.c file in FFmpeg, which arises from the program failing to ensure that pixfmt is set. A remote attacker could use this vulnerability t...

Denial Of Service (DoS) Via File Descriptor Leak

ImageMagick is vulnerable to denial of service DoS attacks. The library contains a file descriptor leak, allowing a malicious user to pass a webp file to the system to crash it...