CVE-2019-20199

CVE-2019-20199 affects ezXML 0.8.3–0.8.6. The vulnerability is in ezxml_decode: while parsing a crafted XML file, memory handling can cause a NULL pointer to be dereferenced when strlen() is applied to a NULL pointer. Product: ezXML library (versions 0.8.3 to 0.8.6). The issue can lead to a crash...

CVE-2019-20199

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while running strlen on a NULL pointer...

Debian: Security Advisory (DLA-1899-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-20199

CVE-2018-20199 affects FAAD2 2.8.8 (libfaad/filtbank.c) with a NULL pointer dereference in ifilter_bank, causing segmentation fault and DoS due to mishandling in ONLY_LONG_SEQUENCE. Multiple advisories (Debian DSA-5109/DSA-1899, Debian DLA-2792, Gentoo GLSA-202006-17) document this and urge upgra...