Vulnerabilities > Fedoraproject > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-06-26 CVE-2020-15304 NULL Pointer Dereference vulnerability in multiple products
An issue was discovered in OpenEXR before 2.5.2.
local
low complexity
openexr fedoraproject opensuse CWE-476
5.5
5.5
2020-06-25 CVE-2020-10994 Out-of-bounds Read vulnerability in multiple products
In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file.
local
low complexity
python fedoraproject canonical CWE-125
5.5
5.5
2020-06-25 CVE-2020-10378 Out-of-bounds Read vulnerability in multiple products
In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.
local
low complexity
python fedoraproject canonical CWE-125
5.5
5.5
2020-06-25 CVE-2020-10177 Out-of-bounds Read vulnerability in multiple products
Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c. 		5.5
5.5
2020-06-22 CVE-2020-4033 In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS.
network
low complexity
freerdp fedoraproject opensuse canonical debian
6.5
6.5
2020-06-22 CVE-2020-4032 In FreeRDP before version 2.1.2, there is an integer casting vulnerability in update_recv_secondary_order.
network
low complexity
freerdp opensuse fedoraproject canonical debian
4.3
4.3
2020-06-22 CVE-2020-4030 In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse.
network
low complexity
freerdp fedoraproject opensuse canonical debian
6.5
6.5
2020-06-22 CVE-2020-11099 In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet.
network
low complexity
freerdp opensuse fedoraproject canonical debian
6.5
6.5
2020-06-22 CVE-2020-11098 In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put.
network
low complexity
freerdp fedoraproject opensuse canonical debian
6.5
6.5
2020-06-22 CVE-2020-11097 In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES.
network
low complexity
freerdp fedoraproject opensuse canonical debian
5.4
5.4