Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 626

Export CSV
CVE-2014-8130

libtiff: divide by zero in the tiffdither tool

The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither.

CVSS 3.0 · 6.5 Medium EPSS 3.8% KEV · Not listed
Vendors
Apple Libtiff Redhat
Products
Iphone Os Mac Os X Libtiff and 7 more
CVE-2014-8129

libtiff: out-of-bounds read/write with malformed TIFF image in tiff2pdf

LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that the BitsPerSample value is 2, and the t2p_sample_lab_signed_to_unsigned function in tiff2pdf.c.

CVSS 3.0 · 8.8 High EPSS 3.7% KEV · Not listed
Vendors
Apple Debian Libtiff and 1 more
Products
Iphone Os Mac Os X Debian Linux and 6 more
CVE-2012-4512

kdelibs: Heap-based buffer overflow when parsing location of a font face source

The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."

CVSS 3.1 · 8.8 High EPSS 11.7% KEV · Not listed
Vendors
Kde Redhat
Products
Kde Enterprise Linux Enterprise Linux Desktop and 2 more