Canvasgfx vulnerabilities
4 vulnerabilities
Known vulnerabilities in Canvasgfx products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Canvas Draw4 vulnerabilities
CVE-2018-3976canvasgfxcanvas_draw+1
EPSS score1.85%
An exploitable out-of-bounds write exists in the CALS Raster file format-parsing functionality of Canvas Draw version 5.0.0.28. A specially crafted CAL image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a CAL image to trigger this vulnerability and gain code execution.CVE-2018-3981canvasgfxcanvas_draw+1EPSS score2.25%
An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution.CVE-2018-3980canvasgfxcanvas_draw+1EPSS score1.46%
An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution.CVE-2018-3973canvasgfxcanvas_draw+1EPSS score1.89%
An exploitable out of bounds write exists in the CAL parsing functionality of Canvas Draw version 5.0.0. A specially crafted CAL image processed via the application can lead to an out of bounds write overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.