PT-2020-22512

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates the involvement of function...

PT-2020-22511

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates involvement of functions su...

Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2020-44565)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A buffer overflow vulnerability exists in Date.parse in versions prior to Mozilla Firefox 78. An attacker can exploit this vulnerability to obtain sensitive information...

Ntop nDPI Buffer Overflow Vulnerability (CNVD-2020-36698)

Ntop nDPI is an open source library for deep packet inspection from Ntop Italy. A buffer overflow vulnerability exists in the ndpiparsepacketlineinfo in the lib/ndpimain.c file in Ntop nDPI 3.2 and earlier versions. The vulnerability stems from a network system or product performing operations in...

DEBIAN-CVE-2020-15471

In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpiparsepacketlineinfo in lib/ndpimain.c...

OSV-2020-605 Global-buffer-overflow in parse_headers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14232 Crash type: Global-buffer-overflow READ 4 Crash state: parseheaders parsehttprequest fuzzparsehttprequest...

OSV-2020-394 Global-buffer-overflow in parse_headers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14529 Crash type: Global-buffer-overflow WRITE 8 Crash state: parseheaders parsehttprequest fuzzparsehttprequest...

OSV-2020-373 UNKNOWN READ in url_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14501 Crash type: UNKNOWN READ Crash state: urldecode parsekeyvalues fuzzparsehttprequest...

OSV-2020-328 UNKNOWN READ in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16448 Crash type: UNKNOWN READ Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...

PT-2020-22378

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state includes function calls such as parse sec attr 44, setcos select file, and sc select...

PT-2020-22306

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a global buffer overflow read, which occurs in the lex multiline string, lex next, and parse config functions. No information is...

PT-2020-22399

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 1 crash has been reported. The crash involves the functions ihevcd parse slice data, ihevcd nal unit, and ihevcd decode. No...

PT-2020-22401

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue has been identified, which can cause a crash. The crash occurs in the iri unescape inline function, called by wget iri...

PT-2020-22462

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the functions g date time get week number, g date time new...

PT-2020-22448

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of Stack-use-after-return WRITE 1. The crash state involves functions such as sdb itoa, parse resource directory. No...

PT-2020-22438

Name of the Vulnerable Software and Affected Versions c-ares affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the ares parse into addrinfo2 function, which is called by ares parse aaaa reply. This function...

PT-2020-22441

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Global-buffer-overflow READ 8. The crash state involves several functions: ne find element, ne parse, an...

PT-2020-22468

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash involves the following functions: ihevcd mv merge, ihevcd get mv ctb, and ihevcd parse sli...

PT-2020-22508

Name of the Vulnerable Software and Affected Versions Sass affected versions not specified Description The issue is related to a heap-buffer-overflow read, which occurs in the Sass::Prelexer::quoted string function. This function is called by Sass::Parser::lex and Sass::Parser::parse value schema...

PT-2020-22500

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow write crash. The crash state includes functions such as r buf read, parse function starts, and init items. N...