PT-2020-22598

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow read issue has been identified. The crash state indicates the involvement of functions such as H5O attr shared decode, H5O msg iterate real, and H5O attr open by name...

SUSE SLED15 / SLES15 Security Update : ffmpeg (SUSE-SU-2019:3184-2)

This update for ffmpeg fixes the following issues : Security issues fixed: CVE-2019-17542: Fixed a heap-buffer overflow in vqadecodechunk due to an out-of-array access bsc1154064. CVE-2019-12730: Fixed an uninitialized use of variables due to an improper check bsc1137526. CVE-2019-9718: Fixed a...

PT-2020-14382

Name of the Vulnerable Software and Affected Versions RIOT version 2020.04 Description The issue is related to a buffer overflow in the base64 decoder. The base64 decode function uses an output buffer estimation function base64 estimate decode size to compute the required buffer capacity and...

PT-2020-22511

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates involvement of functions su...

IIS-Raid - A Native Backdoor Module For Microsoft IIS (Internet Information Services)

IS Raid is a native IIS module that abuses the extendibility of IIS to backdoor the web server and carry out custom actions defined by an attacker. Documentation When installed, IIS-Raid will process every request and method, check if the X-Password header exists and compare it against the...

CVE-2020-15470

ffjpeg through 2020-02-24 has a heap-based buffer overflow in jfifdecode in jfif.c...

OSV-2020-548 Heap-buffer-overflow in acommon::DecodeDirect<unsigned short>::decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16531 Crash type: Heap-buffer-overflow READ 2 Crash state: acommon::DecodeDirect::decode acommon::Convert::convert aspellspellersuggest...

PT-2020-22474

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Bad-free. The crash state involves the sc pkcs15 decode prkdf entry function in the fuzz pkcs15 decode.c...

PT-2020-22266

Name of the Vulnerable Software and Affected Versions spng affected versions not specified Description The issue is related to a crash caused by an unknown read. Technical details include the crash type being UNKNOWN READ and the crash state involving functions such as validate past idat and spng...

PT-2020-22346

Name of the Vulnerable Software and Affected Versions idn2 affected versions not specified Description The issue is related to a crash caused by a use-of-uninitialized-value error. Technical details about the crash include the involvement of the idn2 punycode decode, tr46, and idn2 lookup u8...

PT-2020-22262

Name of the Vulnerable Software and Affected Versions spng affected versions not specified Description The issue is related to a heap-buffer-overflow read. Technical details about the crash include the spng decode image function. Recommendations At the moment, there is no information about a newe...

PT-2020-22412

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 1 crash has been reported. The crash involves the functions ihevcd get mv ctb, ihevcd process, and ihevcd decode. No informati...

PT-2020-22399

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 1 crash has been reported. The crash involves the functions ihevcd parse slice data, ihevcd nal unit, and ihevcd decode. No...

PT-2020-22242

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the git buf decode base85 function, parse patch binary...

PT-2020-22427

Name of the Vulnerable Software and Affected Versions OpenJPEG affected versions not specified Description The issue is related to a crash caused by an unknown read. Technical details about the crash include the function names opj t2 decode packets, opj tcd t2 decode, and opj tcd decode tile...

PT-2020-22459

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash occurred, involving the Variant decodeJson and UA decodeJson functions in the fuzz json decode encode.cc file...

PT-2020-22405

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a global buffer overflow read. The crash occurs in the following functions: decode tlv, dissect noe, and call...

PT-2020-22279

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: url decode, parse key values, and fuzz parse http request...

PT-2020-22272

Name of the Vulnerable Software and Affected Versions spng affected versions not specified Description The issue is related to a heap-use-after-free read error. Technical details about the crash include the crash type being a heap-use-after-free READ and the crash state involving functions such a...

PT-2020-22390

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 8 crash has been reported. The crash involves the ih264d decode slice thread and ih264d decode picture thread functions, as wel...