CVE-2021-3578

A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arbitrary integer value past the end of a heap-allocated structure by issuing an unexpected APPENDUID response. This could be plausibly exploited for remote co...

DEBIAN-CVE-2021-3578

A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arbitrary integer value past the end of a heap-allocated structure by issuing an unexpected APPENDUID response. This could be plausibly exploited for remote co...

CVE-2021-3578

A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arbitrary integer value past the end of a heap-allocated structure by issuing an unexpected APPENDUID response. This could be plausibly exploited for remote co...

Remote code execution

A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arbitrary integer value past the end of a heap-allocated structure by issuing an unexpected APPENDUID response. This could be plausibly exploited for remote co...

CVE-2021-3578

CVE-2021-3578 affects isync/mbsync before versions 1.3.6 and 1.4.2. The root cause is an unchecked pointer cast that lets a malicious or compromised IMAP server write an arbitrary integer past the end of a heap-allocated structure via an unexpected APPENDUID response, potentially enabling remote ...

The vulnerability of the Cast component in the Google Chrome browser allows a hacker to gain access to confidential information.

The vulnerability of the Cast component in Google Chrome browser relates to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to gain access to confidential information through a specially created web page...

rdkit:mol_data_stream_to_mol_fuzzer: Bad-cast to RDKit::Atom from invalid vptr in RDKit::ROMol::initFromOther

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6370621397794816 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000027f4a50 Crash...

Denial of Service (DoS)

Overview libpq is a node native bindings to the PostgreSQL libpq C client library. Affected versions of this package are vulnerable to Denial of Service DoS when the addons attempt to cast the second argument to an array and fail. This happens for every non-array argument passed. Note: pg-native ...

Chromium: CVE-2022-0469 Use after free in Cast

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

PT-2022-1576

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 98.0.4758.80 Description The issue is related to a use after free in the Cast component, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This could potentially lead to...

PT-2022-1776

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 99.0.4844.51 Description The issue is related to a use after free in the Cast component of Google Chrome, which can lead to heap corruption. An attacker who convinces a user to install a malicious extension and...

rdkit:mol_data_stream_to_mol_fuzzer: Bad-cast to Queries::Query<int, const RDKit::Atom *, true> from invalid vptr in std::__1::__shared_ptr_pointer<Queries::Query<int, RDKit::Atom const*, true>*, s

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6223384252383232 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Bad-cast Crash Address: 0x00000300db50 Crash...

In TagLib 1.11.1 the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file.

...

CVE-2020-14107

A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN...

CVE-2020-14107

A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN...

Stack overflow

A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN...

CVE-2020-14107

Technical details about CVE-2020-14107 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2020-14107: Out-of-bounds Write

A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN...

PT-2022-8545

Name of the Vulnerable Software and Affected Versions Cast affected versions not specified Description A stack overflow in the HTTP server of Cast can be exploited to make the app crash in a Local Area Network LAN setting. Recommendations At the moment, there is no information about a newer versi...

PT-2022-2082

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 100.0.4896.60 Description The issue is related to a use after free in the Cast UI, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This may impact the...