Lucene search
K

16 matches found

Snyk
Snyk
added 2025/05/14 6:44 p.m.3 views

Division by zero

Overview Affected versions of this package are vulnerable to Division by zero via the startinputtga function in rdtarga.c. An attacker can cause a denial of service by sending an image with a zero width or height, resulting in a SIGFPE. Remediation A fix was pushed into the master branch but not...

8.7CVSS6.8AI score0.00987EPSS
Exploits0References2
OSV
OSV
added 2023/08/02 8:15 p.m.17 views

CVE-2023-29407

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size width height appearing to be zero...

6.5CVSS7AI score
Exploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 5:18 a.m.2 views

SUSE CVE-2015-3418

The ProcPutImage function in dix/dispatch.c in X.Org Server aka xserver and xorg-server before 1.16.4 allows attackers to cause a denial of service divide-by-zero and crash via a zero-height PutImage request...

7.5CVSS6.7AI score0.00497EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:10 a.m.1 views

SUSE CVE-2019-13297

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled...

5.1CVSS7.1AI score0.00297EPSS
Exploits1References6
OSV
OSV
added 2022/05/26 12:1 a.m.2 views

GHSA-HR8G-F6R6-MR22 Buffer over-flow in Pillow

When reading a TGA file with RLE packets that cross scan lines, Pillow reads the information past the end of the first line without deducting that from the length of the remaining file data. This vulnerability was introduced in Pillow 9.1.0, and can cause a heap buffer overflow. Opening an image...

8.7CVSS6.7AI score0.00604EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2020/03/31 8:15 p.m.3 views

ImageMagick: heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled

A heap-based buffer over-read was discovered in ImageMagick in the way it selects an individual threshold for each pixel based on the range of intensity values in its local neighborhood due to a height of zero mishandle error. Applications compiled against ImageMagick libraries that accept...

8.8CVSS5.9AI score0.00297EPSS
Exploits1References4
NVD
NVD
added 2019/07/05 1:15 a.m.17 views

CVE-2019-13297

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled...

8.8CVSS9.2AI score0.00297EPSS
Exploits1References8
OSV
OSV
added 2019/07/05 1:15 a.m.1 views

ALPINE-CVE-2019-13297

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled...

8.8CVSS7.1AI score0.00297EPSS
Exploits1References1
OSV
OSV
added 2019/07/05 1:15 a.m.1 views

DEBIAN-CVE-2019-13297

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled...

8.8CVSS9.3AI score0.00297EPSS
Exploits1References1
OSV
OSV
added 2019/07/05 1:15 a.m.0 views

UBUNTU-CVE-2019-13297

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled...

8.8CVSS7AI score0.00297EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2019/07/05 12:51 a.m.38 views

CVE-2019-13297

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled...

8.8CVSS7.4AI score0.00297EPSS
Exploits1
OSV
OSV
added 2016/12/13 4:59 p.m.1 views

DEBIAN-CVE-2015-3418

The ProcPutImage function in dix/dispatch.c in X.Org Server aka xserver and xorg-server before 1.16.4 allows attackers to cause a denial of service divide-by-zero and crash via a zero-height PutImage request...

7.5CVSS7.1AI score0.00497EPSS
Exploits0References1
OSV
OSV
added 2016/12/13 4:59 p.m.4 views

CVE-2015-3418

The ProcPutImage function in dix/dispatch.c in X.Org Server aka xserver and xorg-server before 1.16.4 allows attackers to cause a denial of service divide-by-zero and crash via a zero-height PutImage request...

7.5CVSS7.2AI score
Exploits0References5
UbuntuCve
UbuntuCve
added 2016/12/13 4:59 p.m.39 views

CVE-2015-3418

The ProcPutImage function in dix/dispatch.c in X.Org Server aka xserver and xorg-server before 1.16.4 allows attackers to cause a denial of service divide-by-zero and crash via a zero-height PutImage request...

7.5CVSS7.1AI score0.00497EPSS
Exploits0References1
OSV
OSV
added 2016/12/13 4:59 p.m.1 views

UBUNTU-CVE-2015-3418

The ProcPutImage function in dix/dispatch.c in X.Org Server aka xserver and xorg-server before 1.16.4 allows attackers to cause a denial of service divide-by-zero and crash via a zero-height PutImage request...

7.5CVSS7.1AI score0.00497EPSS
Exploits0References2
OSV
OSV
added 2015/01/16 8:59 p.m.1 views

DEBIAN-CVE-2014-9604

libavcodec/utvideodec.c in FFmpeg before 2.5.2 does not check for a zero value of a slice height, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted Ut Video data, related to the 1 restoremedian and 2...

7.5CVSS7.5AI score0.00519EPSS
Exploits0References1
Rows per page
Query Builder