nodejs-ini: Prototype pollution via malicious INI file

A flaw was found in nodejs-ini. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context...

CVE-2021-0340

In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions...

PT-2021-28052

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue is related to a global buffer overflow read, as indicated by an OSS-Fuzz report. The crash state involves functions such as vte write debug, do action, and parse data. No...

nodejs-ini: Prototype pollution via malicious INI file

A flaw was found in nodejs-ini. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context...

PT-2021-28039

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A heap buffer overflow read issue has been identified. The crash state indicates involvement of the sc pkcs15emu oberthur add data, sc oberthur parse privateinfo, and sc pkcs15emu oberthur in...

PT-2021-13007

Name of the Vulnerable Software and Affected Versions: Android versions 8.1 through 11 Description: The issue is related to a heap buffer overflow in the ih264d parse pslice function, which could lead to remote code execution without requiring additional execution privileges. User interaction is...

The vulnerability of the parse_args() function in the Sudo system administration program allows a malicious user to elevate their privileges to root level.

The vulnerability of the parseargs function in the Sudo system administration program is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

PT-2021-8104 · Htmldoc +4 · Htmldoc +4

Name of the Vulnerable Software and Affected Versions: htmldoc versions 1.9.12 and prior Description: The issue is related to a stack buffer overflow in the parse table function of the ps-pdf.cxx component. This can lead to arbitrary code execution and denial of service, allowing an attacker to...

kernel: Local buffer overflow in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c

A flaw was found in the Linux kernel. A local attacker, able to inject conntrack netlink configuration, could overflow a local buffer causing crashes or triggering the use of incorrect protocol numbers in ctnetlinkparsetuplefilter in net/netfilter/nfconntracknetlink.c. The highest threat from thi...

OSV-2018-288 Use-of-uninitialized-value in jbig2_decode_symbol_dict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9688 Crash type: Use-of-uninitialized-value Crash state: jbig2decodesymboldict jbig2symboldictionary jbig2parsesegment...

OSV-2018-280 Heap-buffer-overflow in xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7931 Crash type: Heap-buffer-overflow READ Crash state: xstrdup ftpparsewinntls wgetftplsfuzzer.c...

PT-2021-27564

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves several functions: add range, pdf map range to range, and pdf...

PT-2021-27599

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves functions such as jbig2 immediate generic region, jbig2 pars...

PT-2021-27406

Name of the Vulnerable Software and Affected Versions: GnuTLS affected versions not specified Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to a crash. The error is specifically...

PT-2021-27383

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves several functions: vte write debug, do action,...

PT-2021-27572

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: jbig2 decode symbol dict, jbig2...

PT-2021-27567

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap buffer overflow read issue was identified, as reported by OSS-Fuzz. The crash occurred in the ftp parse winnt ls function, indicating a potential...

PT-2021-27570

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read crash has been identified. The crash involves the xstrdup function and occurs in the ftp parse winnt ls function, as observed...

PT-2021-27414

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves several functions: vte write debug, do action,...

OSV-2018-212 Heap-buffer-overflow in token_stream_prepare

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9805 Crash type: Heap-buffer-overflow READ 1 Crash state: tokenstreamprepare parse typedeclparse...