<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: canvasgfx</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2018-3980: An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0</title><link>https://patchthecve.com/cve/CVE-2018-3980.html</link><guid>https://patchthecve.com/cve/CVE-2018-3980.html</guid><pubDate>Wed, 17 Jun 2026 01:58:09 +0000</pubDate><description>HIGH 7.8: An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability an</description></item><item><title>CVE-2018-3976: An exploitable out-of-bounds write exists in the CALS Raster file format-parsing functionality of Canvas Draw </title><link>https://patchthecve.com/cve/CVE-2018-3976.html</link><guid>https://patchthecve.com/cve/CVE-2018-3976.html</guid><pubDate>Wed, 17 Jun 2026 01:58:08 +0000</pubDate><description>HIGH 7.8: An exploitable out-of-bounds write exists in the CALS Raster file format-parsing functionality of Canvas Draw version 5.0.0.28. A specially crafted CAL image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a CAL image to trigger t</description></item><item><title>CVE-2018-3973: An exploitable out of bounds write exists in the CAL parsing functionality of Canvas Draw version 5.0.0</title><link>https://patchthecve.com/cve/CVE-2018-3973.html</link><guid>https://patchthecve.com/cve/CVE-2018-3973.html</guid><pubDate>Wed, 17 Jun 2026 01:58:08 +0000</pubDate><description>HIGH 7.8: An exploitable out of bounds write exists in the CAL parsing functionality of Canvas Draw version 5.0.0. A specially crafted CAL image processed via the application can lead to an out of bounds write overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and ga</description></item><item><title>CVE-2018-3981: An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0</title><link>https://patchthecve.com/cve/CVE-2018-3981.html</link><guid>https://patchthecve.com/cve/CVE-2018-3981.html</guid><pubDate>Wed, 17 Jun 2026 01:58:09 +0000</pubDate><description>HIGH 7.8: An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution.</description></item></channel></rss>