Records26All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Entropymine records in CISA KEVNo Entropymine vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 69
Deark v.1.6.2 was discovered to contain a stack overflow via the do_prism_read_palette() function at /modules/atari-img.c.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00423 · Published 2022-12-19 · No fix listed CWE-787
Priority LOW 27
In Deark before 1.5.8, a specially crafted input file can cause a NULL pointer dereference in the dbuf_write function (src/deark-dbuf.c).
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00895 · Published 2021-04-14 · No fix listed CWE-476
Priority LOW 26
In Deark before v1.5.8, a specially crafted input file can cause a division by zero in (src/fmtutil.c) because of the value of pixelsize.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00843 · Published 2021-04-14 · No fix listed CWE-369
Open these records in search →