CVE-2021-3574

A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks...

CVE-2021-3574

CVE-2021-3574 affects ImageMagick 7.0.11-5. A crafted TIFF file processed with convert triggers a memory leak as detected by ASAN. The connected documents confirm the product (ImageMagick) and the vulnerable routine (memory handling during conversion) but do not provide a remediation version or w...

CVE-2021-3574

A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks...

CVE-2022-23460

Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx json parsing may lead to stack exhaustion in an address sanitized ASAN build. This issue may lead to Denial of Service if the program using the jsonxx library crashes. This issue exists on the...

CVE-2022-23460 Stack overflow in Jsonxx

Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx json parsing may lead to stack exhaustion in an address sanitized ASAN build. This issue may lead to Denial of Service if the program using the jsonxx library crashes. This issue exists on the...

CVE-2022-38227

XPDF commit ffaf11c was discovered to contain a stack overflow via asanmemcpy at asaninterceptorsmemintrinsics.cpp...

CVE-2022-36150

tifig v0.2.2 was discovered to contain a heap-buffer overflow via asanmemmove at /asan/asaninterceptorsmemintrinsics.cpp...

DEBIAN-CVE-2022-36146

SWFMill commit 53d7690 was discovered to contain a memory allocation issue via operator new at asannewdelete.cpp...

CVE-2022-38227

XPDF commit ffaf11c was discovered to contain a stack overflow via asanmemcpy at asaninterceptorsmemintrinsics.cpp...

CVE-2022-36152

tifig v0.2.2 was discovered to contain a memory leak via operator new at /asan/asannewdelete.cpp...

CVE-2022-35010

PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via asaninterceptorsmemintrinsics.cpp...

CVE-2022-35010

PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via asaninterceptorsmemintrinsics.cpp...

UBUNTU-CVE-2022-38227

XPDF commit ffaf11c was discovered to contain a stack overflow via asanmemcpy at asaninterceptorsmemintrinsics.cpp...

CVE-2022-36152

tifig v0.2.2 was discovered to contain a memory leak via operator new at /asan/asannewdelete.cpp...

SWFMill 安全漏洞

SWFMill is a tool for working with Adobe Flash SWF files by Daniel Cassidy, a personal developer in the UK. A security vulnerability exists in SWFMill commit number: 53d7690, which stems from a memory allocation problem in new in its asannewdelete.cpp component...

XPDF 缓冲区错误漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF suffers from a buffer error vulnerability that stems from asanmemcpy containing a stack overflow in asaninterceptorsmemintrinsics.cpp...

PNGDec 安全漏洞

PNGDec is an Arduino PNG image decoder library from the individual developer Larry Bank. A security vulnerability exists in PNGDec, which stems from a memory allocation issue in asanmalloclinux.cpp...

Null Pointer Dereference Caused Segmentation Fault

Description Null pointer dereference caused segmentation fault. This can cause Denial-of -service attack. version smlijun@ubuntu:/gpacasan/bin/gcc$ ./MP4Box -version MP4Box - GPAC version 2.1-DEV-rev243-gf87b12b32-master c 2000-2022 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io Plea...

CVE-2022-2476

CVE-2022-2476 affects wavpack (notably wavpack 5.4.0). The issue is a null pointer dereference in wavunpack.c:834, causing a segmentation fault (AddressSanitizer report). Several connected advisories confirm the same root cause and indicate a remediation path: upgrade to a newer wavpack version (...

chafa <= 4bac1466 is vulnerable to an out of bounds read vulnerability.

chafa = 4bac1466 is vulnerable to an out of bounds read vulnerability. Building Build chafa with ASANaddress sanitizer sh $ git rev-parse HEAD 4bac14668535c09f6f47552bbd1566097dab4bf8 $ export CFLAGS="-g -O0 -fsanitize=address"; export CXXFLAGS="-g -O0 -fsanitize=address"; export CC=$which...