https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:06:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-01703 bdu:2026-01703 https://cve.radiocsirt.org/vuln/bdu:2026-01703 https://cve.radiocsirt.org/vuln/bell-cve-2023-2804 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2023-2804 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0124 certfr-2024-avi-0124 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0124 https://cve.radiocsirt.org/vuln/euvd-2026-210705 EUVD-2026-210705 https://cve.radiocsirt.org/vuln/euvd-2026-210705 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2804 <p>A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the sample data type exceeds the valid sample range, hence, an attacker could craft a 12-bit lossless JPEG image that contains out-of-range 12-bit samples. An application attempting to decompress such image using merged upsampling would lead to segmentation fault or buffer overflows, causing an application to crash.</p> <p>A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the sample data type exceeds the valid sample range, hence, an attacker could craft a 12-bit lossless JPEG image that contains out-of-range 12-bit samples. An application attempting to decompress such image using merged upsampling would lead to segmentation fault or buffer overflows, causing an application to crash.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-2804 https://cve.radiocsirt.org/vuln/ghsa-jv36-3qpq-7g23 <p>A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the sample data type exceeds the valid sample range, hence, an attacker could craft a 12-bit lossless JPEG image that contains out-of-range 12-bit samples. An application attempting to decompress such image using merged upsampling would lead to segmentation fault or buffer overflows, causing an application to crash.</p> <p>A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the sample data type exceeds the valid sample range, hence, an attacker could craft a 12-bit lossless JPEG image that contains out-of-range 12-bit samples. An application attempting to decompress such image using merged upsampling would lead to segmentation fault or buffer overflows, causing an application to crash.</p> https://cve.radiocsirt.org/vuln/ghsa-jv36-3qpq-7g23 https://cve.radiocsirt.org/vuln/gsd-2023-2804 gsd-2023-2804 https://cve.radiocsirt.org/vuln/gsd-2023-2804 https://cve.radiocsirt.org/vuln/msrc_cve-2023-2804 msrc_CVE-2023-2804 https://cve.radiocsirt.org/vuln/msrc_cve-2023-2804 https://cve.radiocsirt.org/vuln/ncsc-2026-0053 NCSC-2026-0053 https://cve.radiocsirt.org/vuln/ncsc-2026-0053 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13552-1 <p>libjpeg-turbo-3.0.1-77.1 on GA media</p> <p>libjpeg-turbo-3.0.1-77.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13552-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0369 <p>Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows-Produkten ausnutzen, um Administratorrechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Spoofing-Angriffe zu starten, Daten zu manipulieren, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows-Produkten ausnutzen, um Administratorrechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Spoofing-Angriffe zu starten, Daten zu manipulieren, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0369