4545 matches found
STB resource management error vulnerability
stb is a single-file public domain library for C/C ++. A security vulnerability exists in nothings stb version 2.27, which stems from a heap-based post-release reuse issue in the function stbijpeghuffdecode in the file stbimage.h. The vulnerability is caused by a heap-based post-release reuse iss...
STB security vulnerabilities
stb is a single-file public domain library for C/C ++. A security vulnerability exists in stb version v2.27, which stems from the inclusion of an integer shift of invalid size in the component stbijpegdecodeblockprogac...
CVE-2022-26507
A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7. A crafted input file can lead to remote code execution. This is not the same as any of: CVE-2021-21810, CVE-2021-21811, CVE-2021-21812, CVE-2021-21815, CVE-2021-21825, CVE-2021-21826, CVE-2021-21828,...
CVE-2022-26507
A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7. A crafted input file can lead to remote code execution. This is not the same as any of: CVE-2021-21810, CVE-2021-21811, CVE-2021-21812, CVE-2021-21815, CVE-2021-21825, CVE-2021-21826, CVE-2021-21828,...
libsndfile Heap Buffer Overflow RCE
The vulnerability of the psfnmsadpcmdecodeblock function in the library for reading and writing audio files, libsndfile, is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code on the target...
CVE-2022-27419
rtl433 21.12 was discovered to contain a stack overflow in the function acurite00275rmdecode at /devices/acurite.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...
UBUNTU-CVE-2022-27419
rtl433 21.12 was discovered to contain a stack overflow in the function acurite00275rmdecode at /devices/acurite.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...
PT-2022-18413
Name of the Vulnerable Software and Affected Versions rtl 433 version 21.12 Description The issue is related to a stack overflow in the acurite 00275rm decode function located at /devices/acurite.c. This allows attackers to cause a Denial of Service DoS via a crafted file. Recommendations For rtl...
PT-2022-16792
Name of the Vulnerable Software and Affected Versions Go versions prior to 1.17.9 Go versions 1.18.x prior to 1.18.1 Description The issue is related to a Decode stack overflow in the encoding/pem package. This occurs when a large amount of PEM data is processed, leading to a stack overflow...
tinyexr.h Heap Buffer Overflow DoS
The vulnerability of the tinyexr::DecodePixelData function in the tinyexr.h component of the OpenEXR processing library involves integer overflow. Exploiting this vulnerability allows a malicious actor to cause service interruptions...
PT-2022-36927
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 8 crash occurred, as reported by OSS-Fuzz. The crash involves the lwan h2 huffman decode for fuzzing function, which is related...
PT-2022-17563 · Unknown · Go-Codec-Dagpb
Name of the Vulnerable Software and Affected Versions: go-codec-dagpb versions prior to 1.3.1 Description: The dag-pb codec can panic when decoding invalid blocks, due to an assumption that the reported link length is accurate. If the block ends before the reported length, it results in a buffer...
CSZCMS 1.3.0 SSRF / LFI / Remote Code Execution
Title: CSZCMS V1.3.0 - SSRF To LFI To Rce Author: Hejap Zairy Date: 07.04.2022 Vendor: https://sourceforge.net/projects/cszcms/files/install/ Software: https://liquidtelecom.dl.sourceforge.net/project/cszcms/install/CSZCMS-V1.3.0.zip Reference: https://github.com/Matrix07ksa Tested on: Windows,...
PT-2022-36918
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves several function calls, including decode mcu, decompress onepass,...
PT-2022-36917
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to ...
PT-2022-36911
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, specifically a WRITE 4 crash type. The crash occurs in the following functions: decode mcu, consume...
PT-2022-3657 · Mutt +10 · Mutt +10
Name of the Vulnerable Software and Affected Versions: Mutt versions 0.94.13 through 2.2.3 Description: The issue is related to a buffer overflow in the mutt decode uuencoded function of the Mutt email client. This can allow a remote attacker to gain unauthorized access to protected information o...
libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in LibRaw::init_fuji_block
Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5040319428689920 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
PT-2022-9772
Name of the Vulnerable Software and Affected Versions ark library affected versions not specified Description A remote code execution issue exists due to an incomplete check for the xheader decode path record function's parameter length value in the ark library. This allows remote attackers to...
Bandisoft ARK library buffer error vulnerability
Bandisoft ARK library is a South Korean company Bandisoft's library to decompress most of the existing compression formats such as ZIP, RAR, ALZ, EGG, etc. in various OS environments such as Windows, macOS, Linux, etc., and to create compressed files in ZIP/7Z format. A security vulnerability...