Product
debian/libtk-img vulnerabilities
6 published CVES affecting debian/libtk-img, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 6
- Critical
- 0
- High
- 0
- Medium
- 3
- Low
- 0
- Unscored
- 3
- CISA KEV
- 0
Latest debian/libtk-img CVEs
Newest publication first
-
Unknown
-
DTSA-140-1 libtk-img - buffer overflow
PublishedUnknown -
Unknown
-
MediumCVSS 6.8 EPSS 4.2%
Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.
-
MediumCVSS 4.3 EPSS 2.6%
Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service (segmentation fault) via an animated GIF in which the first subimage is smaller than a subsequent subima...
-
MediumCVSS 6.8 EPSS 4.9%
Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect p...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.