CVE-2022-43289

The CVE-2022-43289 entry relates to Deark v1.6.2, which contains a stack overflow in the do_prism_read_palette() function within the /modules/atari-img.c component. The vulnerability is triggered locally via that function, with a high impact in confidentiality, integrity, and availability as indi...

CVE-2021-28856

Deark prior to v1.5.8 is affected by a division-by-zero vulnerability in src/fmtutil.c caused by the pixelsize value when processing specially crafted input files. Affected software is Deark (open source command-line tool for decoding certain file types); the issue is triggered in fmtutil.c, lead...

CVE-2021-28855

The CVE-2021-28855 entry describes a NULL pointer dereference in Deark prior to version 1.5.8, caused by crafted input triggering the dbuf_write function (src/deark-dbuf.c). Affected software is Deark (before 1.5.8); impact is a crash (partial availability) as indicated in CVSS data. Remediation ...