CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2021-33798
https://notcve.org/view.php?id=CVE-2021-33798
07 Jul 2023 — A null pointer dereference was found in libpano13, version libpano13-2.9.20. The flow allows attackers to cause a denial of service and potential code execute via a crafted file. • https://groups.google.com/u/1/g/hugin-ptx/c/gLtz2vweD74 • CWE-476: NULL Pointer Dereference •
CVSS: 9.1EPSS: 0%CPEs: 2EXPL: 1CVE-2021-33293 – Ubuntu Security Notice USN-6163-1
https://notcve.org/view.php?id=CVE-2021-33293
10 Mar 2022 — Panorama Tools libpano13 v2.9.20 was discovered to contain an out-of-bounds read in the function panoParserFindOLine() in parser.c. Se ha detectado que Panorama Tools libpano13 versión v2.9.20, contiene una lectura fuera de límites en la función panoParserFindOLine() en el archivo parser.c It was discovered that pano13 did not properly validate the prefix provided for PTcrop's output. An attacker could use this issue to cause pano13 to crash, resulting in a denial of service, or possibly execute arbitrary c... • https://groups.google.com/u/1/g/hugin-ptx/c/gLtz2vweD74 • CWE-125: Out-of-bounds Read •
CVSS: 9.8EPSS: 0%CPEs: 7EXPL: 0CVE-2021-20307 – Ubuntu Security Notice USN-6163-1
https://notcve.org/view.php?id=CVE-2021-20307
05 Apr 2021 — Format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values. Una vulnerabilidad de cadena de formato en la función panoFileOutputNamesCreate() en libpano versiones 13 2.9.20~rc2+dfsg-3 y anteriores, puede conllevar a leer y escribir valores de memoria arbitrarios It was discovered that pano13 did not properly validate the prefix provided for PTcrop's output. An attacker could use this issue to cause pano13 to crash,... • https://bugzilla.redhat.com/show_bug.cgi?id=1946284 • CWE-134: Use of Externally-Controlled Format String •