Lucene search
+L

673 matches found

osv_cve
osv_cve
•added 2021/03/05 2:15 p.m.•21 views

CVE-2021-28026

jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coefforder.cc ReadPermutation. When decoding a malicous jxl file using djxl, an attacker can trigger arbitrary code execution or a denial of service...

7.8CVSS8.2AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2021/03/05 2:15 p.m.•8 views

CVE-2021-28026

jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coefforder.cc ReadPermutation. When decoding a malicous jxl file using djxl, an attacker can trigger arbitrary code execution or a denial of service...

7.8CVSS8.4AI score0.01172EPSS
SaveExploits1References2
Prion
Prion
•added 2021/03/05 2:15 p.m.•23 views

Heap overflow

jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coefforder.cc ReadPermutation. When decoding a malicous jxl file using djxl, an attacker can trigger arbitrary code execution or a denial of service...

6.8CVSS8.1AI score0.01172EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/03/05 1:17 p.m.•4 views

CVE-2021-28026

jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coefforder.cc ReadPermutation. When decoding a malicous jxl file using djxl, an attacker can trigger arbitrary code execution or a denial of service...

8.5CVSS0.01172EPSS
SaveExploits1References1
CVE
CVE
•added 2021/03/05 1:17 p.m.•58 views

CVE-2021-28026

CVE-2021-28026 affects jpeg-xl v0.3.2; a heap buffer overflow in /lib/jxl/coeff_order.cc ReadPermutation can be triggered when decoding a malicious JXL file with djxl, enabling arbitrary code execution or a denial of service. The connected sources corroborate the vulnerability; no patch/version r...

7.8CVSS8.1AI score0.01172EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/03/05 1:17 p.m.•48 views

CVE-2021-28026

jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coefforder.cc ReadPermutation. When decoding a malicous jxl file using djxl, an attacker can trigger arbitrary code execution or a denial of service...

8.3AI score0.01172EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2021/03/05 1:17 p.m.•35 views

CVE-2021-28026

jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coefforder.cc ReadPermutation. When decoding a malicous jxl file using djxl, an attacker can trigger arbitrary code execution or a denial of service...

7.8CVSS8.1AI score0.01172EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/05 12:00 a.m.•5 views

CVE-2021-28026: Out-of-bounds Write

jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coefforder.cc ReadPermutation. When decoding a malicous jxl file using djxl, an attacker can trigger arbitrary code execution or a denial of service...

7.8CVSS6.6AI score0.01172EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/03/05 12:00 a.m.•6 views

PT-2021-17714

Name of the Vulnerable Software and Affected Versions: jpeg-xl version 0.3.2 Description: The issue is related to a heap buffer overflow in the /lib/jxl/coeff order.cc file, specifically in the ReadPermutation function. This can be triggered when decoding a malicious jxl file using djxl,...

7.8CVSS0.01172EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2021/03/05 12:00 a.m.•17 views

JPEG-XL buffer error vulnerability

JPEG aka jpeg-xl is JPEG open source an application. Provides image delivery on the Web and professional photography needs. jpeg-xl v0.3.2 suffers from a buffer error vulnerability that originates from a heap buffer overflow. An attacker could exploit this vulnerability to trigger arbitrary code...

7.8CVSS8.5AI score0.01172EPSS
SaveExploits1References1
zdt
zdt
•added 2021/03/03 12:00 a.m.•111 views

jpeg-xl 0.3.1 Memory Corruption Vulnerability

Multiple Vulnerabilities in jpeg-xl =================================== CVE: CVE-2021-27804 Highest Severity Rating: High Confirmed Affected Versions: jpeg-xl v0.3.1 and earlier Vendor: Joint Photographic Experts Group JPEG Vendor URL: https://gitlab.com/wg1/jpeg-xl Summary and Impact...

9.8CVSS0.3AI score0.03989EPSS
SaveExploits1
CNVD
CNVD
•added 2021/03/03 12:00 a.m.•19 views

Sytech XL Reporter Elevation of Privilege Vulnerability

Sytech XL Reporter is a software application from Sytech Corporation. It provides all the powerful features of Excel such as charting, formatting and formulas, as well as XLReporter's industry-specific features to generate excellent reports. A local elevation of privilege vulnerability exists in...

8.8CVSS7.5AI score0.00465EPSS
SaveExploits1References1
NVD
NVD
•added 2021/03/02 1:15 a.m.•33 views

CVE-2021-27804

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

9.8CVSS0.03989EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2021/03/02 1:15 a.m.•16 views

CVE-2021-27804

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

9.8CVSS6.9AI score
SaveExploits0References4
Prion
Prion
•added 2021/03/02 1:15 a.m.•25 views

Memory corruption

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

7.5CVSS9.5AI score0.03989EPSS
SaveExploits1References4Affected Software1
attackerkb
attackerkb
•added 2021/03/02 1:15 a.m.•10 views

CVE-2021-27804

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

9.8CVSS8.4AI score0.03989EPSS
SaveExploits1References5
CVE
CVE
•added 2021/03/02 12:30 a.m.•131 views

CVE-2021-27804

CVE-2021-27804 involves the JPEG XL project (jpeg-xl) with versions up to 0.3.2, where writable memory corruption is reported. The provided documents identify the affected software and the memory-corruption impact but do not disclose a detailed root cause in those entries. The interconnected Red ...

9.8CVSS9.4AI score0.03989EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2021/03/02 12:30 a.m.•37 views

CVE-2021-27804

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

9.7AI score0.03989EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2021/03/02 12:30 a.m.•44 views

CVE-2021-27804

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

9.8CVSS3.1AI score0.03989EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2021/03/02 12:00 a.m.•4 views

PT-2021-17626

Name of the Vulnerable Software and Affected Versions: jpeg-xl versions through 0.3.2 Description: The issue allows for writable memory corruption. Recommendations: For versions through 0.3.2, update to a version later than 0.3.2 to resolve the issue...

9.8CVSS0.03989EPSS
SaveExploits1References8
Rows per page
Query Builder