4554 matches found
DEBIAN-CVE-2023-38852
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the unicodedecodewcstombs function in xlstool.c:266...
SUSE CVE-2020-36138
An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...
PT-2023-26633
Name of the Vulnerable Software and Affected Versions libxlsv version 1.6.2 Description The issue allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the unicode decode wcstombs function in xlstool.c:266. This can lead to the execution of...
fluent-bit:flb-it-fuzz-cmetrics_decode_fuzz_OSSFUZZ: Invalid-free in reset_context
Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4737967611314176 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-cmetricsdecodefuzzOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Invalid-free Cras...
Heap-based Buffer Overflow
Description heap-buffer-overflow p/bf/plugin.c:176 in decode Environment radare2 5.8.9 31000 @ linux-x86-64 commit: 95b648f0907e91e10d55fc48147a7dae99029c5b Build export CC=gcc CXX=g++ CFLAGS="-fsanitize=address -static-libasan" CXXFLAGS="-fsanitize=address -static-libasan"...
Design/Logic Flaw
An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...
UBUNTU-CVE-2020-36138
An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...
FFmpeg code-related vulnerabilities
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version 4.3, which stems from a flaw in the decodeframe function in the libavcodec/tiff.c file. No details of the vulnerability are available at th...
PT-2023-11665 · Rockcarry · Ffjpeg
Name of the Vulnerable Software and Affected Versions: rockcarry ffjpeg versions 1.0.0 and earlier Description: The issue is related to a Buffer Overflow vulnerability in the jfif decode function, which allows local attackers to execute arbitrary code due to an issue with ALIGN. This vulnerabilit...
PT-2023-35948 · Git +1 · Fluent-Bit
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Invalid-free. The crash state involves several functions, including reset context and cmt decode...
ffjpeg Security Vulnerabilities
ffjpeg is a JPEG encoder/decoder from the Chinese individual developer Kai Chen. A security vulnerability exists in rockcarry ffjpeg version 1.0.0, which originates from a buffer overflow vulnerability in the function jfifdecode. An attacker can exploit this vulnerability to execute arbitrary cod...
PT-2023-11808
Name of the Vulnerable Software and Affected Versions FFmpeg version 4.3 Description An issue was discovered in decode frame in libavcodec/tiff.c, allowing remote attackers to cause a denial of service DoS. Recommendations For FFmpeg version 4.3, consider updating to a newer version to mitigate t...
CVE-2023-32567
Ivanti Avalanche decodeToMap XML External Entity Processing. Fixed in version 6.4.1.236...
Improper Neutralization
getkirby/cms is vulnerable to Improper Neutralization. The vulnerability exists in the decode function at Txt.php due to a field injection bug in the content storage implementation which allows an attacker to inject malicious data or code...
Envoy proxy HTTP CORS DoS
The vulnerability of the HTTP CORS proxy server Envoy’s filter relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to perform a DoS attack by removing the origin header between the decodeHeaders and encodeHeaders operations...
AZL-34723 CVE-2023-39128 affecting package gdb for versions less than 13.2-3
GNU gdb GDB 13.0.50.20220805-git was discovered to contain a stack overflow via the function adadecode at /gdb/ada-lang.c...
UBUNTU-CVE-2023-39128
GNU gdb GDB 13.0.50.20220805-git was discovered to contain a stack overflow via the function adadecode at /gdb/ada-lang.c...
PT-2023-3902 · Envoy · Envoy
Name of the Vulnerable Software and Affected Versions: Envoy versions prior to 1.27.0 Envoy versions prior to 1.26.4 Envoy versions prior to 1.25.9 Envoy versions prior to 1.24.10 Envoy versions prior to 1.23.12 Description: The issue is related to a use-after-free error in the HTTP CORS filter o...
PT-2023-26794
Name of the Vulnerable Software and Affected Versions GNU gdb GDB version 13.0.50.20220805-git Description A stack overflow issue was discovered in the function ada decode at /gdb/ada-lang.c. This issue affects the GNU gdb GDB debugger. Recommendations For GNU gdb GDB version 13.0.50.20220805-git...
ezXML Heap Buffer Overflow DoS
The vulnerability of the ezxmldecode function in the ezXML XML syntax analysis library involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially created XML file...