4550 matches found
DEBIAN-CVE-2023-29421
An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is an out-of-bounds write in bz3decodeblock...
UBUNTU-CVE-2023-29416
An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A bz3decodeblock out-of-bounds write can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with libsais...
PT-2023-22244
Name of the Vulnerable Software and Affected Versions bzip3 versions prior to 1.3.0 Description An issue was discovered in libbzip3.a in bzip3. A bz3 decode block out-of-bounds write can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with libsais...
PT-2023-22248 · Bzip3 · Bzip3
Name of the Vulnerable Software and Affected Versions: bzip3 versions prior to 1.2.3 Description: An issue was discovered in libbzip3.a. There is a crash caused by an invalid memmove in bz3 decode block. Recommendations: For versions prior to 1.2.3, update to version 1.2.3 or later to resolve the...
PT-2023-22247
Name of the Vulnerable Software and Affected Versions bzip3 versions prior to 1.2.3 Description An issue was discovered in libbzip3.a. There is a bz3 decode block out-of-bounds read. Recommendations For versions prior to 1.2.3, update to version 1.2.3 or later to resolve the issue. As a temporary...
PT-2023-22249 · Bzip3 · Bzip3
Name of the Vulnerable Software and Affected Versions: bzip3 versions prior to 1.2.3 Description: An issue was discovered in libbzip3.a. There is an out-of-bounds write in the bz3 decode block function. Recommendations: For versions prior to 1.2.3, update to version 1.2.3 or later to resolve the...
Security Bulletin: decode-uri-component is vulnerable to CVE-2022-38900 used in IBM Maximo Application Suite
Summary IBM Maximo Application Suite uses decode-uri-component which is vulnerable to CVE-2022-38900. Vulnerability Details CVEID:CVE-2022-38900 DESCRIPTION: decode-uri-component is vulnerable to a denial of service, caused by improper input validation by the decodeComponents function. By sending...
DEBIAN-CVE-2023-28879
In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then...
UBUNTU-CVE-2023-28879
In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then...
SUSE CVE-2023-22845
An out-of-bounds read vulnerability exists in the TGAInput::decodepixel functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability...
PT-2023-36798
Уязвимость функции nfsd4 decode compound модуля fs/nfsd/nfs4xdr.c поддержки сетевой файловой системы NFS ядра операционной системы Linux связана с выходом операции за границы буфера в памяти Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность ...
DEBIAN-CVE-2023-22845
An out-of-bounds read vulnerability exists in the TGAInput::decodepixel functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability...
UBUNTU-CVE-2023-22845
An out-of-bounds read vulnerability exists in the TGAInput::decodepixel functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2023-22845
An out-of-bounds read vulnerability exists in the TGAInput::decodepixel functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability...
PT-2023-18722
Name of the Vulnerable Software and Affected Versions OpenImageIO version 2.4.7.1 Description An out-of-bounds read issue exists in the TGAInput::decode pixel functionality. A specially crafted targa file can lead to information disclosure. An attacker can provide a malicious file to trigger this...
GHSA-FQM2-GH8W-GR68 TensorFlow vulnerable to segfault when opening multiframe gif
Impact Integer overflow occurs when 2^31 = numframes height width channels 2^32, for example Full HD screencast of at least 346 frames. python import urllib.request dat =...
PT-2023-17809 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: A heap buffer overflow in the ih264e init proc ctxt function of ih264e process.c could lead to a possible out of bounds read, resulting in local information disclosure. This issue does...
PT-2023-20228
Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.12.0 and 2.11.1 Description Integer overflow occurs when 2^31 = num frames height width channels 2^32, for example, a Full HD screencast of at least 346 frames. This issue is related to the tf.io.decode gif...
golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service
An uncontrolled resource consumption flaw was found in Golang math/big. A too-short encoded message can cause a panic in Float.GobDecode and Rat.GobDecode in math/big in Go, potentially allowing an attacker to create a denial of service, impacting availability...
libredwg:llvmfuzz: Heap-buffer-overflow in dwg_decode_LWPOLYLINE_private
Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5561541119574016 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...