Vmihalis

**Name of the Vulnerable Software and Affected Versions** OpenEXR versions 3.4.0 through 3.4.12 **Description** The HTJ2K decoder fails to verify if the header-length field `PLEN` parsed from a chunk's compressed data fits within the available buffer. During decoding, the codestream pointer is advanced by the size specified in `PLEN` and passed to the OpenJPH memory-input path. A crafted value in this field can push the pointer beyond the buffer boundary, resulting in an out-of-bounds read when processing untrusted files. **Recommendations** Update to version 3.4.13.

**Name of the Vulnerable Software and Affected Versions** stable-diffusion.cpp versions prior to master-584-0a7ae07 **Description** An out-of-bounds read error exists during PyTorch checkpoint pickle opcode parsing. The pickle .ckpt parser in the `src/model.cpp` file fails to consistently verify that sufficient input remains before reading opcode arguments or advancing the parser buffer. Specifically, opcode handlers advance the parser position using expressions like `buffer += N` without confirming that `buffer + N <= buffer end`. A crafted or truncated .ckpt file can trigger reads beyond the end of the metadata buffer, potentially leading to application crashes when loading untrusted model files from sources such as model sharing sites. **Recommendations** Update to version master-584-0a7ae07. As a temporary workaround, avoid loading .ckpt checkpoint files from untrusted sources and prefer safer formats such as .safetensors.

**Name of the Vulnerable Software and Affected Versions** stable-diffusion.cpp versions prior to master-584-0a7ae07 **Description** A heap buffer overflow exists in the `SHORT BINUNICODE` parsing for PyTorch checkpoint files within the pickle `.ckpt` parser in `src/model.cpp`. The issue stems from sign confusion on the opcode length field, where a crafted `.ckpt` file can trigger a `memcpy()` function with an excessively large length derived from a negative signed value. This leads to heap corruption, which may cause the process to crash or potentially allow for code execution depending on the heap layout. The issue occurs when an application loads a `.ckpt` file from an untrusted source. **Recommendations** Update to version master-584-0a7ae07. Avoid loading `.ckpt` checkpoint files from untrusted sources and use safer formats such as `.safetensors` where possible.

**Name of the Vulnerable Software and Affected Versions** stable-diffusion.cpp versions prior to master-584-0a7ae07 **Description** The pickle .ckpt parser in src/model.cpp contains a heap buffer overflow in the BINUNICODE opcode handler. This occurs due to sign confusion on the opcode length field, where a crafted .ckpt file can trigger a `memcpy()` function with an excessively large length derived from a negative signed value, leading to immediate heap corruption. **Recommendations** Update to version master-584-0a7ae07. As a temporary workaround, load .ckpt checkpoint files only from trusted sources and prefer safer formats such as .safetensors.

**Name of the Vulnerable Software and Affected Versions** stable-diffusion.cpp versions prior to master-584-0a7ae07 **Description** The pickle .ckpt parser in src/model.cpp contains a heap buffer overflow in the GLOBAL opcode handler. This occurs due to missing validation when searching for newline-delimited fields. A specially crafted .ckpt file lacking the expected newline can cause the parser to use -1 as a copy length, leading to immediate heap corruption. Exploitation requires the application or user to load a .ckpt file from an untrusted source. **Recommendations** Update to version master-584-0a7ae07. Avoid loading .ckpt checkpoint files from untrusted sources. Use safer formats such as .safetensors when possible.

**Name of the Vulnerable Software and Affected Versions** libheif versions prior to 1.22.1 **Description** The uncompressed HEIF decoder validates explicit icef compressed-unit offsets using `unit offset` + `unit size`. An integer wrap during this addition allows a crafted HEIF file to bypass range checks and construct a vector from iterators outside the compressed item buffer, resulting in an out-of-bounds heap read and a system crash. **Recommendations** Update to version 1.22.1.