Vulnerabilities (CVE)

Filtered by vendor Entropymine Subscribe
Total 26 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-9093 1 Entropymine 1 Imageworsener 2025-04-20 4.3 MEDIUM 6.5 MEDIUM
The my_skip_input_data_fn function in imagew-jpeg.c in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted image.
CVE-2017-9204 1 Entropymine 1 Imageworsener 2025-04-20 4.3 MEDIUM 6.5 MEDIUM
The iw_get_ui16le function in imagew-util.c:405:23 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted image, related to imagew-jpeg.c.
CVE-2022-43289 1 Entropymine 1 Deark 2025-04-17 N/A 7.8 HIGH
Deark v.1.6.2 was discovered to contain a stack overflow via the do_prism_read_palette() function at /modules/atari-img.c.
CVE-2018-5252 1 Entropymine 1 Imageworsener 2024-11-21 2.6 LOW 5.3 MEDIUM
libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the get_raw_sample_int function in imagew-main.c.
CVE-2018-16782 1 Entropymine 1 Imageworsener 2024-11-21 6.8 MEDIUM 8.8 HIGH
libimageworsener.a in ImageWorsener 1.3.2 has a buffer overflow in the bmpr_read_rle_internal function in imagew-bmp.c.
CVE-2017-12804 1 Entropymine 1 Imageworsener 2024-11-21 4.3 MEDIUM 6.5 MEDIUM
The iwgif_init_screen function in imagew-gif.c:510 in ImageWorsener 1.3.2 allows remote attackers to cause a denial of service (hmemory exhaustion) via a crafted file.