https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:42:08 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-01652 bdu:2016-01652 https://cve.radiocsirt.org/vuln/bdu:2016-01652 https://cve.radiocsirt.org/vuln/bell-cve-2015-8540 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2015-8540 https://cve.radiocsirt.org/vuln/certfr-2022-avi-650 certfr-2022-avi-650 https://cve.radiocsirt.org/vuln/certfr-2022-avi-650 https://cve.radiocsirt.org/vuln/cnvd-2016-01227 cnvd-2016-01227 https://cve.radiocsirt.org/vuln/cnvd-2016-01227 https://cve.radiocsirt.org/vuln/euvd-2026-95762 EUVD-2026-95762 https://cve.radiocsirt.org/vuln/euvd-2026-95762 https://cve.radiocsirt.org/vuln/fkie_cve-2015-8540 <p>Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.</p> <p>Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-8540 https://cve.radiocsirt.org/vuln/ghsa-7qhq-6293-wrx3 <p>Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.</p> <p>Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.</p> https://cve.radiocsirt.org/vuln/ghsa-7qhq-6293-wrx3 https://cve.radiocsirt.org/vuln/gsd-2015-8540 gsd-2015-8540 https://cve.radiocsirt.org/vuln/gsd-2015-8540 https://cve.radiocsirt.org/vuln/oesa-2024-2091 <p><strong>Affected:</strong> openEuler:24.03-LTS: syslinux, openEuler:22.03-LTS-SP4: syslinux, openEuler:22.03-LTS-SP3: syslinux, openEuler:20.03-LTS-SP4: syslinux, openEuler:22.03-LTS-SP1: syslinux</p> <p>Security Fix(es):</p> <p>The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.(CVE-2011-2501)</p> <p>Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image.(CVE-2011-2690)</p> <p>The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service (application crash) via a crafted PNG image.(CVE-2011-2691)</p> <p>The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly hav…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: syslinux, openEuler:22.03-LTS-SP4: syslinux, openEuler:22.03-LTS-SP3: syslinux, openEuler:20.03-LTS-SP4: syslinux, openEuler:22.03-LTS-SP1: syslinux</p> <p>Security Fix(es):</p> <p>The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.(CVE-2011-2501)</p> <p>Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image.(CVE-2011-2690)</p> <p>The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service (application crash) via a crafted PNG image.(CVE-2011-2691)</p> <p>The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly hav…</p> https://cve.radiocsirt.org/vuln/oesa-2024-2091 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10184-1 <p>libpng12-0-1.2.56-1.5 on GA media</p> <p>libpng12-0-1.2.56-1.5 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10184-1 https://cve.radiocsirt.org/vuln/rhsa-2016:0099 <p>JDK: J9 JVM allows code to invoke non-public interface methods TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH) libpng: Out-of-bounds read in png_convert_to_rfc1123 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions libpng: underflow read in png_check_keyword() OpenJDK: URL deserialization inconsistencies (Networking, 8059054) OpenJDK: logging of RMI connection secrets (JMX, 8130710) OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962) OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017) ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543)</p> <p>JDK: J9 JVM allows code to invoke non-public interface methods TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH) libpng: Out-of-bounds read in png_convert_to_rfc1123 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions libpng: underflow read in png_check_keyword() OpenJDK: URL deserialization inconsistencies (Networking, 8059054) OpenJDK: logging of RMI connection secrets (JMX, 8130710) OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962) OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017) ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543)</p> https://cve.radiocsirt.org/vuln/rhsa-2016:0099 https://cve.radiocsirt.org/vuln/suse-su-2016:0399-1 <p>Security update for java-1_7_1-ibm</p> <p>Security update for java-1_7_1-ibm</p> https://cve.radiocsirt.org/vuln/suse-su-2016:0399-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-8540 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libpng</p> <p>Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libpng</p> <p>Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-8540 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0175 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libpng ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libpng ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0175