Vulnerabilities > Fedoraproject > Fedora > 31

DATE CVE VULNERABILITY TITLE RISK
2020-06-26 CVE-2020-15306 Out-of-bounds Write vulnerability in multiple products
An issue was discovered in OpenEXR before v2.5.2.
5.5
2020-06-26 CVE-2020-15305 Use After Free vulnerability in multiple products
An issue was discovered in OpenEXR before 2.5.2.
5.5
2020-06-26 CVE-2020-15304 NULL Pointer Dereference vulnerability in multiple products
An issue was discovered in OpenEXR before 2.5.2.
local
low complexity
openexr fedoraproject opensuse CWE-476
5.5
2020-06-25 CVE-2020-11538 Out-of-bounds Read vulnerability in multiple products
In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311.
network
high complexity
python fedoraproject canonical CWE-125
8.1
2020-06-25 CVE-2020-10994 Out-of-bounds Read vulnerability in multiple products
In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file.
local
low complexity
python fedoraproject canonical CWE-125
5.5
2020-06-25 CVE-2020-10379 Classic Buffer Overflow vulnerability in multiple products
In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.
local
low complexity
python fedoraproject canonical CWE-120
7.8
2020-06-25 CVE-2020-10378 Out-of-bounds Read vulnerability in multiple products
In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.
local
low complexity
python fedoraproject canonical CWE-125
5.5
2020-06-25 CVE-2020-10177 Out-of-bounds Read vulnerability in multiple products
Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c.
5.5
2020-06-22 CVE-2020-4033 Out-of-bounds Read vulnerability in multiple products
In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS.
6.5
2020-06-22 CVE-2020-4032 Incorrect Conversion between Numeric Types vulnerability in multiple products
In FreeRDP before version 2.1.2, there is an integer casting vulnerability in update_recv_secondary_order.
4.3