PT-2021-27886

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the following functions: consume list, pn amqp decode DqEoQBIoIe, and pn message...

qpid-proton:fuzz-message-decode: Heap-buffer-overflow in consume_list

Project: https://github.com/apache/qpid-proton.git Detailed Report: https://oss-fuzz.com/testcase?key=6101905114267648 Project: qpid-proton Fuzzing Engine: libFuzzer Fuzz Target: fuzz-message-decode Job Type: libfuzzerasanqpid-proton Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

GHSA-P49H-HJVM-JG3H PCX P mode buffer overflow in Pillow

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...

PT-2021-27883

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which occurs in the Canvas5Structure::NIBDecoder::decode function, specifically when calling...

Pillow TiffDecode Component Buffer Overflow DoS

The vulnerability of the TiffDecode.c component in the Pillow image processing library is related to the lack of memory checks during reading operations. Exploiting this vulnerability could allow an attacker to cause a service failure...

libjpeg-turbo decode_mcu

The vulnerability of the decodemcu function in the libjpeg-turbo library is related to resource management errors. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information by excessive consumption of processor resources...

libjpeg-turbo Heap Buffer Overflow DoS

The vulnerability of the decodemcu and decodemcufast functions in the libjpeg-turbo library arises from the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure by using a specially crafted file...

nike.com Cross Site Scripting vulnerability OBB-2201528

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| nike.com ---|--- Open Bug Bounty...

PT-2021-27860

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a global buffer overflow read. The crash involves the functions fr base16 decode nstd, fr value box from str, and...

The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access.

...

matio:matio_fuzzer: Heap-buffer-overflow in H5O__dtype_decode_helper

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5489525699248128 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow REA...

vlc:vlc-demux-dec-libfuzzer: Heap-buffer-overflow in Decode

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6684421319688192 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer Job Type: libfuzzerasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 3 Crash Address:...

PT-2021-27842

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a global buffer overflow read. The crash involves several functions, including fr base16 decode nstd, fr value bo...

PT-2021-27841

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the functions fr dns label to value box, decode value...

PT-2021-27840

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a heap-buffer-overflow read, which occurs in the fr struct from network function, specifically when calling decode record. This...

PT-2021-27839

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which occurs in the fr dns label uncompressed length function, and is also associated with the decode...

AZL-6598 CVE-2021-42008 affecting package kernel for versions less than 5.10.78.1-1

The decodedata function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAPNETADMIN capability can lead to root access...

DEBIAN-CVE-2021-42008

The decodedata function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAPNETADMIN capability can lead to root access...

CVE-2021-42008

The decodedata function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAPNETADMIN capability can lead to root access...

UBUNTU-CVE-2021-42008

The decodedata function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAPNETADMIN capability can lead to root access...