Vulnerabilities (CVE)

Filtered by vendor Entropymine Subscribe
Total 26 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-8326 1 Entropymine 1 Imageworsener 2025-04-20 6.8 MEDIUM 8.8 HIGH
libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image, related to imagew-bmp.c and imagew-util.c.
CVE-2017-9094 1 Entropymine 1 Imageworsener 2025-04-20 4.3 MEDIUM 6.5 MEDIUM
The lzw_add_to_dict function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted image.
CVE-2022-43289 1 Entropymine 1 Deark 2025-04-17 N/A 7.8 HIGH
Deark v.1.6.2 was discovered to contain a stack overflow via the do_prism_read_palette() function at /modules/atari-img.c.
CVE-2018-5252 1 Entropymine 1 Imageworsener 2024-11-21 2.6 LOW 5.3 MEDIUM
libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the get_raw_sample_int function in imagew-main.c.
CVE-2018-16782 1 Entropymine 1 Imageworsener 2024-11-21 6.8 MEDIUM 8.8 HIGH
libimageworsener.a in ImageWorsener 1.3.2 has a buffer overflow in the bmpr_read_rle_internal function in imagew-bmp.c.
CVE-2017-12804 1 Entropymine 1 Imageworsener 2024-11-21 4.3 MEDIUM 6.5 MEDIUM
The iwgif_init_screen function in imagew-gif.c:510 in ImageWorsener 1.3.2 allows remote attackers to cause a denial of service (hmemory exhaustion) via a crafted file.