4544 matches found
PT-2022-2214
Name of the Vulnerable Software and Affected Versions libsndfile affected versions not specified Description The issue is related to a buffer overflow in dynamic memory in the wavlike ima decode block function of the libsndfile library, which is used for reading and writing audio files. This coul...
CVE-2021-39667
In ih264dparsedecodeslice of ih264dparseslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10...
NS WooCommerce Watermark <= 2.11.3 - Abuse of Functionality
An unprivileged user could use the functionality of the plugin to load images that hide malware for example from passing malicious domains to hide their trace, by making them pass through the vulnerable domain. Search for a vulnerable domain with the dork:...
PT-2025-8208
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the NFSD component. The issue is related to the nfssvc decode writeargs function, where a potential underflow can...
matio:matio_fuzzer: Heap-buffer-overflow in H5MM_memcpy
Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5768430031077376 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow READ 6 Crash...
CVE-2022-25050
rtl433 21.12 was discovered to contain a stack overflow in the function somfyiohcdecode. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...
UBUNTU-CVE-2022-25050
rtl433 21.12 was discovered to contain a stack overflow in the function somfyiohcdecode. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...
rtl_433 Buffer Error Vulnerability
Rtl433 is a general-purpose data receiver from Benjamin Larsson's personal developer. A program for decoding radio transmissions from devices in the Ism band and other frequencies. A security vulnerability exists in rtl433 version 21.12, which stems from the inclusion of a stack overflow in the...
An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmval[bmlen-1] in nfsd4_decode_bitmap4 in fs/nfsd/nfs4xdr.c. In this flaw a local attacker with user privilege may gain access to out-of-bounds memory leading to a system integrity and confidentiality threat.
...
PT-2022-10952
Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-12 Description The issue is related to a heap buffer overflow in the ih264d parse decode slice function of ih264d parse slice.c, which could lead to remote information disclosure without requiring...
rtl_433 security vulnerability
The rtl433 is a general purpose data receiver from the personal developer Benjamin Larsson. A program for decoding radio transmissions from devices in the Ism band and other frequencies. A security vulnerability exists in rtl433 version 21.12, which originates from an Off-by-one error when decodi...
PT-2022-17066
Name of the Vulnerable Software and Affected Versions rtl 433 version 21.12 Description An Off-by-one Error occurs in the cmr113 decode function of the affected software when decoding a crafted file. This issue can potentially be exploited. Recommendations For rtl 433 version 21.12, at the moment...
PT-2022-17065
Name of the Vulnerable Software and Affected Versions rtl 433 version 21.12 Description A stack overflow was discovered in the function somfy iohc decode. This issue allows attackers to cause a Denial of Service DoS via a crafted file. Recommendations For rtl 433 version 21.12, consider disabling...
pillow:fuzz_pillow: Heap-buffer-overflow in ImagingTgaRleDecode
Detailed Report: https://oss-fuzz.com/testcase?key=5309778291720192 Project: pillow Fuzzing Engine: libFuzzer Fuzz Target: fuzzpillow Job Type: libfuzzerasanpillow Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x616000658a81 Crash State: ImagingTgaRleDecode decode...
CVE-2022-0150
The WP Accessibility Helper WAH WordPress plugin before 0.6.0.7 does not sanitise and escape the wahi parameter before outputting back its base64 decode value in the page, leading to a Reflected Cross-Site Scripting issue...
CVE-2022-0150: Improper Neutralization of Input During Web Page Generation
The WP Accessibility Helper WAH WordPress plugin before 0.6.0.7 does not sanitise and escape the wahi parameter before outputting back its base64 decode value in the page, leading to a Reflected Cross-Site Scripting issue...
CLSA-2022-1645466754 Fix of CVE: CVE-2021-43527
CVE-2021-43527: nss: Memory corruption in decodeECorDsaSignature with DSA signatures and RSA-PSS - Pin validation date for PayPalEE test cert...
Debian DSA-5082-1 : php7.4 - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5082 advisory. Two security issues were found in PHP, a widely-used open source general purpose scripting language which could result in information disclosure or denial of...
PT-2022-36842
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 4 crash has been reported. The crash state includes functions such as row mt worker hook, execute, and av1 decode tg tiles and...
PT-2022-6793 · FFmpeg +5 · Ffmpeg +5
Name of the Vulnerable Software and Affected Versions: FFmpeg versions prior to 3.0 Description: An issue was discovered in the FFmpeg package, where the vp3 decode frame function in libavcodec/vp3.c lacks a check of the return value of av malloc, which will cause a null pointer dereference. This...