OSV-2020-182 Heap-buffer-overflow in hb_array_t<OT::IntType<unsigned char, 1u> const> hb_array_t<OT::IntType<unsigned

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20249 Crash type: Heap-buffer-overflow READ 1 Crash state: hbarrayt const hbarrayt ::copy OT::SBIXGlyph::copy...

OSV-2020-66 Heap-buffer-overflow in CPLErr GDALResampleChunk32R_AverageT<unsigned char, int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21558 Crash type: Heap-buffer-overflow READ 1 Crash state: CPLErr GDALResampleChunk32RAverageT GDALResampleChunk32RAverage GDALRasterBand::RasterIOResampled...

RUSTSEC-2020-0012 Relies on undefined behavior of `char::from_u32_unchecked`

The Windows implementation of this crate relied on the behavior of std::char::fromu32unchecked when its safety clause is violated. Even though this worked with Rust versions up to 1.42 at least, that behavior could change with any new Rust version, possibly leading a security issue. The flaw was...

PT-2020-17497

Name of the Vulnerable Software and Affected Versions os str bytes crate versions prior to 2.0.0 Description The issue arises from false expectations about the behavior of char::from u32 unchecked. Specifically, the Windows implementation of the os str bytes crate relied on the behavior of...

CVE-2020-11010

In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, startswith, or endswith filters and their case-insensitive...

SQL injection in Tortoise ORM

Impact Various forms of SQL injection has been found, for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL was only affected when filtering with contains, startswith or endswith filters and their case-insensitive counterparts Patches Please upgrade to 0.15.2...

PT-2020-12490

Name of the Vulnerable Software and Affected Versions Tortoise ORM versions prior to 0.15.23 Tortoise ORM versions prior to 0.16.6 Description The issue affects Tortoise ORM, where various forms of SQL injection have been found for MySQL when filtering or doing mass-updates on char/text fields...

CVE-2015-5745

Buffer overflow in the sendcontrolmsg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service QEMU process crash via a crafted virtio control message...

PT-2019-6364

Name of the Vulnerable Software and Affected Versions ezXML versions 0.8.3 through 0.8.6 Description The issue is related to the ezxml char content function, which attempts to use realloc on a block that was not allocated, resulting in an invalid free and segmentation fault. This can be exploited...

PT-2019-6360

Name of the Vulnerable Software and Affected Versions ezXML versions 0.8.3 through 0.8.6 Description The issue is related to the function ezxml char content in the ezXML library for parsing XML documents. It involves a use-after-free error, where a pointer to the internal address of a larger bloc...

CVE-2013-2075: Buffer Copy without Checking Size of Input

Multiple buffer overflows in the 1 R5RS char-ready, 2 tcp-accept-ready, and 3 file-select procedures in Chicken through 4.8.0.3 allows attackers to cause a denial of service crash by opening a file descriptor with a large integer value. NOTE: this issue exists because of an incomplete fix for...

PT-2019-14546

Name of the Vulnerable Software and Affected Versions Onigmo versions prior to 6.2.1 Description The issue is related to an out-of-bounds read in the parse char class function due to missing codepoint validation in regenc.c. Recommendations For versions prior to 6.2.1, update to version 6.2.1 or...

JerryScript Buffer Overflow Vulnerability (CNVD-2019-24567)

JerryScript is a lightweight JavaScript engine . The 'litchartoutf8bytes' function in JerryScript commit version 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 jerry-core/lit/lit -char-helpers.c file is vulnerable to a buffer overflow. The vulnerability stems from a networked system or product performi...

UBUNTU-CVE-2019-1010176

JerryScript commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 is affected by: Buffer Overflow. The impact is: denial of service and possibly arbitrary code execution. The component is: function litchartoutf8bytes jerry-core/lit/lit-char-helpers.c:377. The attack vector is: executing crafted...

PT-2019-11495

Name of the Vulnerable Software and Affected Versions: JerryScript versions prior to the version after commit 505dace719aebb3308a3af223cfaa985159efae0 Description: The issue is related to a buffer overflow, which can lead to denial of service and possibly arbitrary code execution. This occurs whe...

PT-2019-3410

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 60.7.1 Description A flaw in the implementation of iCal in Thunderbird causes a heap buffer overflow in parser get next char when processing certain email messages, resulting in a potentially exploitable crash. Th...

PT-2019-6872 · Chicken +1 · Chicken +1

Name of the Vulnerable Software and Affected Versions: Chicken versions prior to 4.8.0.3 Description: The issue is caused by multiple buffer overflows in certain procedures, including char-ready, tcp-accept-ready, and file-select. This allows attackers to cause a denial of service by opening a fi...

CVE-2019-11811

An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/ioports after the ipmisi module is removed, related to drivers/char/ipmi/ipmisiintf.c, drivers/char/ipmi/ipmisimemio.c, and drivers/char/ipmi/ipmisiportio.c...

CVE-2019-11811: Use After Free

An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/ioports after the ipmisi module is removed, related to drivers/char/ipmi/ipmisiintf.c, drivers/char/ipmi/ipmisimemio.c, and drivers/char/ipmi/ipmisiportio.c...

Improper Access Control

Linux kernel is vulnerable to improper access control. The vulnerability exists because the mm subsystem in the Linux kernel does not properly enforce the CONFIGSTRICTDEVMEM protection mechanism. Local users could read or write to kernel memory locations in the first megabyte and bypass...