[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f38A7XP3NwawmqtijdSIugsMghb5OeTn29PdwtCql1rQ":3,"g5a-ex:google\u002Fpicasa@*":134,"g5a-family:google\u002Fpicasa":136},{"success":4,"data":5},true,{"product":6,"versions":44,"topVulnerabilitiesByEpss":58,"kevVulnerabilities":111,"seoMetadata":112,"meta":131},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":43},"google","picasa",13,11,0,"2015-11-17",[14,18,20,22,24,26,28,30,32,34,36,38,41],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"3.5",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"3.5_build_79.67",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"3.5_build_79.69",{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},"3.5_build_79.74",{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},"3.5_build_79.81",{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},"3.5_build_95.18",{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},"3.6",{"version":31,"cve_count":16,"kev_count":11,"has_kev":17},"3.6_build_105.41",{"version":33,"cve_count":16,"kev_count":11,"has_kev":17},"3.6_build_105.61",{"version":35,"cve_count":16,"kev_count":11,"has_kev":17},"3.6_build_95.25",{"version":37,"cve_count":11,"kev_count":11,"has_kev":17},"3.8",{"version":39,"cve_count":40,"kev_count":11,"has_kev":17},"3.9.0",4,{"version":42,"cve_count":16,"kev_count":11,"has_kev":17},"3.9.140","Picasa by Google is a technology product with 13 tracked versions and 11 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[45,46,47,48,49,50,51,52,53,54,55,56,57],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},{"version":31,"cve_count":16,"kev_count":11,"has_kev":17},{"version":33,"cve_count":16,"kev_count":11,"has_kev":17},{"version":35,"cve_count":16,"kev_count":11,"has_kev":17},{"version":37,"cve_count":11,"kev_count":11,"has_kev":17},{"version":39,"cve_count":40,"kev_count":11,"has_kev":17},{"version":42,"cve_count":16,"kev_count":11,"has_kev":17},[59,67,73,77,84,87,90,94,101,106],{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":64,"severity":65,"isKev":17,"epssScore":66},"CVE-2011-2747","Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute arbitrary code via a crafted image file.","2011-07-28",9.3,"v2","Critical",0.04295,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":64,"severity":65,"isKev":17,"epssScore":72},"CVE-2015-8096","Integer overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to execute arbitrary code via unspecified vectors related to \"phase one 0x412 tag,\" which triggers a heap-based buffer overflow.","2015-11-09",10,0.04017,{"cveId":74,"description":75,"publishedDate":12,"cvssScore":71,"cvssVersion":64,"severity":65,"isKev":17,"epssScore":76},"CVE-2015-8221","Integer overflow in Google Picasa before 3.9.140 Build 259 allows remote attackers to execute arbitrary code via the CAMF section in a FOVb image, which triggers a heap-based buffer overflow.",0.03992,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":81,"cvssVersion":64,"severity":82,"isKev":17,"epssScore":83},"CVE-2013-5349","Integer underflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a crafted JPEG tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a large JPEG tag value and a small size.","2014-01-09",7.5,"High",0.02303,{"cveId":85,"description":86,"publishedDate":80,"cvssScore":81,"cvssVersion":64,"severity":82,"isKev":17,"epssScore":83},"CVE-2013-5357","Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a long TIFF StripByteCounts tag.",{"cveId":88,"description":89,"publishedDate":80,"cvssScore":81,"cvssVersion":64,"severity":82,"isKev":17,"epssScore":83},"CVE-2013-5359","Stack-based buffer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 might allow remote attackers to execute arbitrary code via a crafted RAW file, as demonstrated using a KDC file with a certain size.",{"cveId":91,"description":92,"publishedDate":80,"cvssScore":81,"cvssVersion":64,"severity":82,"isKev":17,"epssScore":93},"CVE-2013-5358","Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to trigger memory corruption via a crafted TIFF tag, as demonstrated using a KDC file with a DSLR-A100 model and certain sequences of tags.",0.01272,{"cveId":95,"description":96,"publishedDate":97,"cvssScore":98,"cvssVersion":64,"severity":99,"isKev":17,"epssScore":100},"CVE-2007-4847","Google Picasa allows remote attackers to read image files stored by Picasa via unspecified vectors involving a picasa:\u002F\u002F URI.  NOTE: this information is based upon a vague pre-advisory.","2007-09-12",5,"Medium",0.00528,{"cveId":102,"description":103,"publishedDate":104,"cvssScore":81,"cvssVersion":64,"severity":82,"isKev":17,"epssScore":105},"CVE-2007-4823","Multiple buffer overflows in Google Picasa have unspecified attack vectors and impact.  NOTE: this information is based upon a vague pre-advisory.","2007-09-11",0.00468,{"cveId":107,"description":108,"publishedDate":104,"cvssScore":109,"cvssVersion":64,"severity":99,"isKev":17,"epssScore":110},"CVE-2007-4824","Multiple cross-application scripting (XAS) vulnerabilities in Google Picasa have unspecified attack vectors and impact.  NOTE: this information is based upon a vague pre-advisory.",6.8,0.00436,[],{"title":113,"metaDescription":114,"keywords":115,"structuredData":116},"Picasa by Google - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Picasa by Google covering 13 versions with 11 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Picasa vulnerabilities, Picasa security, Picasa CVE, Google Picasa, Picasa threat intelligence, Google security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":117,"@type":118,"name":119,"description":114,"url":120,"manufacturer":121,"applicationCategory":125,"softwareVersion":126,"mainEntity":127},"https:\u002F\u002Fschema.org","SoftwareApplication","Picasa","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fgoogle\u002Fpicasa",{"@type":122,"name":123,"url":124},"Organization","Google","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fgoogle","Security Software","13 versions tracked",{"@type":128,"name":129,"description":130,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Picasa Security Vulnerabilities","Security vulnerabilities affecting Picasa by Google",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":132,"apiVersion":133},"2026-10-28T15:54:54.028Z","3.0",{"rows":135,"total":11,"capped":17,"failed":11},[],[]]