PT-2021-10931

Name of the Vulnerable Software and Affected Versions ok-file-formats through 2020-06-26 Description A heap-based buffer overflow issue in the ok jpg decode block subsequent scan function allows attackers to cause a Denial of Service DOS via a crafted jpeg file. The issue is related to the ok jpg...

PT-2021-10932 · Unknown · Ok-File-Formats

Name of the Vulnerable Software and Affected Versions: ok-file-formats through 2020-06-26 Description: A heap-based buffer overflow issue in the ok jpg decode block progressive function at ok jpg.c:1054 allows attackers to cause a Denial of Service DOS via a crafted jpeg file. Recommendations: Fo...

DJVU::DjVuTXT::decode() Heap Buffer Overflow DoS

The vulnerability of the DJVU::DjVuTXT::decode function in libraries and utilities for viewing, creating, and editing DjVu files is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using a special...

PT-2021-28353

Name of the Vulnerable Software and Affected Versions: GFWX affected versions not specified Description: The issue is related to a dynamic stack buffer overflow, which can cause a crash. The crash occurs in the decode function of the GFWX class, specifically when decoding short values. The...

PT-2021-28350

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue, as reported by OSS-Fuzz. The crash involves the generate inter prediction samples function within the mc...

JWTweak - Detects The Algorithm Of Input JWT Token And Provide Options To Generate The New JWT Token Based On The User Selected Algorithm

With the global increase in JSON Web Token JWT usage, the attack surface has also increased significantly. Having said that, this utility is designed with the aim to generate the new JWT token with little or no time which would help security enthusiasts to find security flaws in JWT implementatio...

opus:opus_decode_fuzzer_floating: Dynamic-stack-buffer-overflow in decode_split

Project: https://gitlab.xiph.org/xiph/opus.git Detailed Report: https://oss-fuzz.com/testcase?key=4749540455481344 Project: opus Fuzzing Engine: afl Fuzz Target: opusdecodefuzzerfloating Job Type: aflasanopus Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 2 Crash Address:...

opus:opus_multi_fuzzer_floating: Dynamic-stack-buffer-overflow in deemphasis

Project: https://gitlab.xiph.org/xiph/opus.git Detailed Report: https://oss-fuzz.com/testcase?key=5364310208544768 Project: opus Fuzzing Engine: afl Fuzz Target: opusmultifuzzerfloating Job Type: aflasanopus Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 4 Crash Address:...

opus:opus_decode_fuzzer_floating: Dynamic-stack-buffer-overflow in silk_decode_core

Project: https://gitlab.xiph.org/xiph/opus.git Detailed Report: https://oss-fuzz.com/testcase?key=6712133592154112 Project: opus Fuzzing Engine: afl Fuzz Target: opusdecodefuzzerfloating Job Type: aflasanopus Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 2 Crash Address:...

OSV-2021-907 Heap-buffer-overflow in decode_header_value_literal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35675 Crash type: Heap-buffer-overflow READ 1 Crash state: decodeheadervalueliteral decodeheader h2ohpackparserequest...

PT-2021-28323

Name of the Vulnerable Software and Affected Versions: h2o versions affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the decode header value literal and decode header functions, as well as the h2o hpack par...

CVE-2021-3630

An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault. This flaw affects DjVuLibre versions prior to 3.5.28...

DEBIAN-CVE-2021-3630

An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault. This flaw affects DjVuLibre versions prior to 3.5.28...

UBUNTU-CVE-2021-3630

An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault. This flaw affects DjVuLibre versions prior to 3.5.28...

CVE-2021-3630

An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault. This flaw affects DjVuLibre versions prior to 3.5.28...

CVE-2021-3630

An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault. This flaw affects DjVuLibre versions prior to 3.5.28...

CVE-2021-3630

An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault. This flaw affects DjVuLibre versions prior to 3.5.28...

CVE-2021-3630: Out-of-bounds Write

An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault. This flaw affects DjVuLibre versions prior to 3.5.28...

DjVuLibre buffer error vulnerability

DjVuLibre is an open source implementation of DjVu computer file format that includes a DjVu file viewer, browser plug-in, DjVu file decoder/encoder and other utilities. A security vulnerability exists in DjVuLibre versions prior to 3.5.28, which stems from an out-of-bounds write vulnerability...

EulerOS 2.0 SP8 : golang (EulerOS-SA-2021-1980)

According to the version of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader for xml.NewTokenDecoder returns EOF in the...