Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNOME Evince 缓冲区错误漏洞
Vulnerability Description
GNOME Evince是GNOME桌面环境下的一款文档查看工具。该产品支持PDF、PostScript、DjVu、TIFF与DVI等格式。 GNOME Evince 3.32.0及之前版本中存在安全漏洞，该漏洞源于‘tiff_document_render()’和‘tiff_document_get_thumbnail()’函数没有正确处理来自tiff_document_get_thumbnail()的错误。攻击者可利用该漏洞猜测地址或查看之前加载到堆的图像。
CVSS Information
N/A
Vulnerability Type
N/A