CVE-2018-3888

Summary: CVE-2018-3888 is a memory corruption vulnerability in Computerinsel Photoline 20.53, affecting the PCX parsing path. A specially crafted PCX image can trigger an out-of-bounds write in the PCX color map handling, potentially enabling code execution. Relevant sources describe the vulnerab...

CVE-2018-3921

Photoline 20.54 contains a PSD-parsing memory corruption vulnerability (CVE-2018-3921) in the PSD blending channels path that can cause a stack-based overflow and potentially allow code execution. The Talos analysis explains that the blending channel length is read from the image and used to driv...

CVE-2018-3887

CVE-2018-3887 affects Computerinsel Photoline 20.53 (OS X): a memory corruption vulnerability in the PCX-parsing code can cause an out-of-bounds write, overwriting data and potentially allowing code execution when processing a crafted PCX image. The TALOS report specifies a run-length decoding pa...

CVE-2017-12107

CVE-2017-12107 is a memory corruption vulnerability in Photoline 20.02 (Computerinsel Photoline) triggered via a specially crafted PCX image. TALOS details show the underlying flaw in Photoline’s PCX parsing that allows an attacker to control loop 2 iterations and memory writes, potentially enabl...

CVE-2017-12106

CVE-2017-12106 affects Computerinsel Photoline 20.02. The vulnerability resides in the .TGA parsing code, where a dword read from a crafted TGA file is used as a loop count, enabling out-of-bounds writes and potential code execution. Public sources (Talos and Seebug) describe a memory-corruption ...

CVE-2018-3922

CVE-2018-3922 : A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54 (OS X). A specially crafted ANI image can trigger a stack/heap overflow via a faulty length/header handling in the ANI parser, overwriting arbitrary data and potentially enab...

CVE-2018-3886

Photoline 20.53 by Computerinsel contains a PCX-parsing memory corruption vulnerability (CVE-2018-3886). A specially crafted PCX image can trigger an out-of-bounds write, overwriting data and enabling code execution. Public disclosures (Talos) describe the PCX decompression path as the fault, wit...

CVE-2018-3923

Photoline 20.54 is affected by a memory corruption vulnerability in the PCX parsing code, specifically in the PCX run-length encoding path. A specially crafted PCX image can trigger an out-of-bounds write, allowing an attacker to overwrite arbitrary data and potentially gain code execution. The T...

CVE-2017-2920

Summary (CVE-2017-2920): A memory corruption vulnerability in the tag parsing functionality of LibOFX (OFX processing library) can be triggered by specially crafted OFX/.SVG-derivative inputs, potentially allowing out-of-bounds writes. Documented in multiple advisories (Mageia, openSUSE, SUSE, Ge...

CVE-2017-2880

CVE-2017-2880 affects Computerinsel Photoline 20.02, specifically the GIF parsing code. A memory corruption vulnerability arises from reading a byte from the GIF stream (byte value used to control a loop) that drives memory writes, potentially leading to memory overflow and remote code execution....

CVE-2018-3889

Summary: CVE-2018-3889 is a memory-corruption vulnerability in Computerinsel Photoline 20.53 (OS X) within the PCX parsing path. A specially crafted PCX image can trigger an out-of-bounds write in the PCX handling (notably in color-map/decompression logic), overwriting data and potentially enabli...

CVE-2012-1055

CVE-2012-1055 affects PhotoLine 17.01 (and possibly earlier versions before 17.02). The vulnerability is a heap-based buffer overflow in processing JPEG2000 JP2 files with crafted Quantization Default (QCD) marker segments, allowing remote code execution. Affected component is the image editor’s ...