33323 matches found
GO-2021-0142 Unbounded read from invalid inputs in encoding/binary
ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs. Certain invalid inputs to ReadUvarint or ReadVarint can cause these functions to read an unlimited number of bytes from the ByteReader parameter before returning an error. This can lead to processing more input...
Infinite loop
Overview std/encoding/binary is a Go standard library package std/encoding/binary Affected versions of this package are vulnerable to Infinite loop. Go Vulnerability Report: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs.Certain invalid inputs to ReadUvarint ...
OFFIS DCMTK DICOM Toolkit Installed
Binary data offisdcmtkwininstalled.nbin...
CVE-2022-33037
A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted .exe file...
CVE-2022-33037
A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted .exe file...
CVE-2022-33036
A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file...
CVE-2022-33037
A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted .exe file...
CVE-2022-33036
A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file...
Code injection
A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted .exe file...
CVE-2022-33037
A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted .exe file...
CVE-2022-33037
CVE-2022-33037 affects Orwell-Dev-Cpp v5.11, where a binary hijack allows an attacker to execute arbitrary code by processing a crafted .exe file. The vulnerability is documented across multiple sources (e.g., NVD, Red Hat, CNVD) with the described impact being code execution on local access. The...
CVE-2022-33036
A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file...
CVE-2022-33036
CVE-2022-33036 concerns a binary hijack in Embarcadero Dev-CPP v6.3 that enables arbitrary code execution via a crafted .exe file. The effect is tied to a local attack vector with user interaction required, as documented by NVD and corroborated by Red Hat and OSV/CVE records. The root cause descr...
CVE-2022-33036
A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file...
The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.
...
The vulnerability of the `load_elf_binary()` function in the Linux operating system’s kernel allows a hacker to bypass the ASLR protection and expose the protected information.
The vulnerability of the loadelfbinary function in the Linux operating system’s kernel arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to bypass the ASLR protection mechanism and disclose the protected information...
OFFIS DCMTK DICOM Toolkit Installed (Linux)
Binary data offisdcmtklinuxinstalled.nbin...
Embarcadero Technologies Dev-CPP 代码问题漏洞
Embarcadero Technologies Dev-CPP is a free, all-in-one development environment for C/C++ development from Embarcadero Technologies, USA. A security vulnerability exists in Embarcadero Technologies Dev-CPP v6.3, which originates from binary hijacking. The vulnerability can be exploited to execute...
