PT-2022-28287

Name of the Vulnerable Software and Affected Versions Minecraft Windows client affected versions not specified Description The issue arises when the Minecraft Windows client sends malformed JSON in form responses, which the json decode function cannot parse. A workaround, implemented in the...

PT-2022-36996

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions md decode utf8 , md link label hash, and md is link reference. No...

Fedora: Security Advisory for libopenmpt (FEDORA-2021-0eb3ea2051)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2021-45830

A heap-based buffer overflow vulnerability exists in HDF5 1.13.1-1 via H5Faddrdecodelen in /hdf5/src/H5Fint.c, which could cause a Denial of Service...

PT-2022-7543 · Hdf5 +3 · Hdf5 +3

Name of the Vulnerable Software and Affected Versions: HDF5 version 1.13.1-1 Description: A heap-based buffer overflow issue exists in the H5F addr decode len function, located in the /hdf5/src/H5Fint.c file, which could cause a Denial of Service. This issue is related to writing beyond the...

PT-2022-36641

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the Curl sasl decode mech and Curl sasl parse url auth option functions, as well as the pop3...

CVE-2021-45937

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientConnect...

CVE-2021-45932

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow 4 bytes in MqttDecodePublish called from MqttClientDecodePacket and MqttClientHandlePacket...

CVE-2021-45934

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientHandlePacket and MqttClientWaitType...

CVE-2021-45938

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientUnsubscribe...

CVE-2021-45933

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow 8 bytes in MqttDecodePublish called from MqttClientDecodePacket and MqttClientHandlePacket...

Wolfssl buffer error vulnerability

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, USA. A buffer error vulnerability exists in Wolfssl wolfMQTT that stems from the product's failure to properly determine memory boundaries when calling MqttDecodePublish from...

Wolfssl buffer error vulnerability

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, USA. A buffer error vulnerability exists in Wolfssl wolfMQTT that stems from the failure of the product's MqttClientWaitType and MqttClientConnect to correctly determine memor...

Wolfssl buffer error vulnerability

Wolfssl CyaSSL is a small, portable embedded SSL programming library for embedded systems developers from Wolfssl, Inc. in the United States. Wolfssl wolfMQTT 1.9 suffers from a buffer error vulnerability that stems from a heap-based buffer overflow 4 bytes in MqttDecodePublish called from...

Wolfssl buffer error vulnerability

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, USA. A buffer error vulnerability exists in Wolfssl wolfMQTT, which stems from a call to MqttClientDecodePacket from the product's MqttClientHandlePacket and MqttClientWaitTyp...

curl:curl_fuzzer: Heap-buffer-overflow in Curl_sasl_decode_mech

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6136943799304192 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzer Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 10 Crash Address: 0x60a0007c0232 Crash State:...

PT-2021-28002

Name of the Vulnerable Software and Affected Versions stb versions affected versions not specified Description The issue is related to a global buffer overflow read error. Technical details about the crash include the involvement of specific function names such as stbi jpeg decode block, stbi...

PT-2021-24313 · Gif2Apng +2 · Gif2Apng +2

Name of the Vulnerable Software and Affected Versions: gif2apng version 1.9 Description: A heap-based buffer overflow issue was found in the DecodeLZW function, allowing an attacker to write a large amount of arbitrary data outside the boundaries of a buffer. Recommendations: For gif2apng version...

gif2apng buffer error vulnerability

gif2apng is a simple program that converts animations from GIF to APNG format. A security vulnerability exists in gif2apng, which stems from an issue found in gif2apng 1.9 where a heap-based buffer overflow vulnerability exists in the DecodeLZW function. An attacker could use this vulnerability t...

PT-2021-27984

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description The issue is related to a heap buffer overflow read. Technical details about the crash include the Curl sasl decode mech and Curl sasl parse url auth option functions, as well as the pop3 parse...