Libsixel Memory Disclosure Vulnerability

libsixel is a SIXEL encoder/decoder implementation. The 'sixeldecoderdecode' function in the decoder.c file, the 'imagebufferresize' function in the fromsixel.c file, and the 'sixeldecoderaw' function in the fromsixel.c file in libsixel version 1.8.1. ' function, 'imagebufferresize' function of t...

UBUNTU-CVE-2018-14072

libsixel 1.8.1 has a memory leak in sixeldecoderdecode in decoder.c, imagebufferresize in fromsixel.c, and sixeldecoderaw in fromsixel.c...

PT-2018-12323

Name of the Vulnerable Software and Affected Versions libsixel version 1.8.1 Description The issue is related to memory leaks found in the sixel decoder decode function in decoder.c, the image buffer resize function in fromsixel.c, and the sixel decode raw function in fromsixel.c. Recommendations...

PYSEC-2018-133

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp...

DEBIAN-CVE-2018-14033

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Olayoutdecode in H5Olayout.c, related to HDmemcpy...

HDF5 Buffer Overflow Vulnerability (CNVD-2019-03454)

HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. A heap buffer overflow vulnerability exists in the 'H5Ofillnewdecode' of the H5Ofill.c file in HDF version 51.8.20, which can be...

PT-2018-12289

Name of the Vulnerable Software and Affected Versions HDF5 version 1.8.20 Description A heap-based buffer over-read issue was discovered in the HDF5 library, specifically in the function H5O layout decode in H5Olayout.c. This issue is related to the HDmemcpy function. Recommendations For version...

HDF5 Buffer Overflow Vulnerability (CNVD-2019-03453)

HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. A heap buffer overflow vulnerability exists in the 'H5Olayoutdecode' function of the H5Olayout.c file in HDF version 51.8.20,...

PT-2018-3590

Name of the Vulnerable Software and Affected Versions JasPer versions 2.0.14 Description The issue is related to a NULL pointer dereference error in the jp2 decode function, located in libjasper/jp2/jp2 dec.c, which can lead to a denial of service. This error can be exploited by a remote attacker...

DEBIAN-CVE-2018-13870

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Olinkdecode in H5Olink.c...

UBUNTU-CVE-2018-13866

An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer over-read in the function H5Faddrdecodelen in H5Fint.c...

DEBIAN-CVE-2018-13869

An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5Olinkdecode in H5Olink.c...

UBUNTU-CVE-2018-13869

An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5Olinkdecode in H5Olink.c...

PT-2018-12238

Name of the Vulnerable Software and Affected Versions HDF5 version 1.8.20 Description A heap-based buffer over-read issue was discovered in the HDF5 library, specifically in the H5O link decode function located in H5Olink.c. Recommendations For version 1.8.20, consider applying a patch or fix tha...

PT-2018-12235

Name of the Vulnerable Software and Affected Versions HDF5 version 1.8.20 Description A heap-based buffer over-read issue was discovered in the H5O fill old decode function in H5Ofill.c. Recommendations For version 1.8.20, consider updating to a newer version that contains a fix for this issue,...

PT-2018-12236

Name of the Vulnerable Software and Affected Versions HDF5 version 1.8.20 Description An issue was discovered in the HDF5 library, where there is a memcpy parameter overlap in the function H5O link decode in H5Olink.c. Recommendations For version 1.8.20, consider updating to a newer version that...

PT-2018-12240

Name of the Vulnerable Software and Affected Versions HDF5 version 1.8.20 Description A heap-based buffer overflow issue was found in the H5G ent decode function in H5Gent.c. Recommendations For version 1.8.20, consider applying a patch or fix to address the heap-based buffer overflow in the H5G...

CVE-2018-13348

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

Ffmpeg 'ff_mpeg4_decode_picture_header' Null Pointer Dereference Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'ffmpeg4decodepictureheader' function in the libavcodec/mpeg4videodec.c file in FFmpeg version 4.0.1, which is caused by the program failing to check...

PT-2018-3610

Name of the Vulnerable Software and Affected Versions Mercurial versions prior to 4.6.1 Description The issue is related to the mpatch decode function in Mercurial, which mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data,...