3 results · Feed
-
Medium 6.1
OpenSlide through 4.0.1 Heap Out-of-Bounds Read via MIRAX get_tile_position
OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slide_positions array via crafted Slidedat.ini values. Attackers can supply a MIRAX slide whose CameraImageDivisionsPerSide doe…
-
Medium 5.3
OpenSlide: openslide_read_region() returns uninitialized memory with libtiff 4.7.1
OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff.c and _openslide_tiff_read_tile() to request a full-height destination for a parti…
-
High 7.7
OpenSlide: Arbitrary memory write with crafted Ventana BIF file
OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parse_level0_xml() processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile counts from a crafted Ventana BIF file. The invalid counts…