1406 matches found
FFmpeg: Multiple vulnerabilities
Background FFmpeg is a complete, cross-platform solution to record, convert and stream audio and video. Description Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for...
PT-2020-21739
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions readstat convert, sas7bcat parse value labels, and sas7bcat parse...
PT-2020-21794
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A stack-buffer-overflow issue was identified, which can cause a crash. The crash occurs in the readstat convert, dta handle row, and dta handle rows...
Security Bulletin: OpenStack vulnerabilities affect IBM SmartCloud Entry(CVE-2015-7548, CVE-2015-8749 CVE-2015-1850)
Summary IBM SmartClound Entry is vulnerable to several Openstack Nova vulerabilities, which could allow a local authenticated attacker or a remote attacker to obtain sensitive information Vulnerability Details CVEID: CVE-2015-8749 DESCRIPTION: OpenStack Nova could allow a remote attacker to obtai...
PT-2020-22542
Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A crash issue was identified, characterized as an UNKNOWN READ. The crash state involves the functions H5T bit find, H5T conv i i, and H5T convert. Recommendations At the moment, there is no...
PT-2020-22582
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: ycck cmyk convert, sep upsample,...
PT-2020-22527
Name of the Vulnerable Software and Affected Versions perfetto affected versions not specified Description The issue is related to a heap-buffer-overflow read, which occurs in the perfetto::trace processor::ClockTracker module. Specifically, the functions ConvertSlowpath, Convert, and ToTraceTime...
OSV-2020-548 Heap-buffer-overflow in acommon::DecodeDirect<unsigned short>::decode
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16531 Crash type: Heap-buffer-overflow READ 2 Crash state: acommon::DecodeDirect::decode acommon::Convert::convert aspellspellersuggest...
PT-2020-22391
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the involvement of specific functions such as...
PT-2020-22121
Name of the Vulnerable Software and Affected Versions heif affected versions not specified Description A heap buffer overflow read issue has been identified. The crash occurs in the Op YCbCr422 to RGB 16bit::convert colorspace function, which is part of the heif::ColorConversionPipeline::convert...
PT-2021-10837
Name of the Vulnerable Software and Affected Versions libheif version 1.6.2 Description The issue is related to a buffer overflow vulnerability in the convert colorspace function in heif colorconversion.cc. This vulnerability allows attackers to cause a denial of service and disclose sensitive...
pmdk-convert bug fix and enhancement update
An update is available for pmdk-convert. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
pmdk-convert bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
ALEA-2020:1618 pmdk-convert bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
perl-Convert-ASN1 and perl-LDAP bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
ALEA-2020:1575 perl-Convert-ASN1 and perl-LDAP bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
perl-Convert-ASN1 and perl-LDAP bug fix and enhancement update
An update is available for perl-LDAP, perl-Convert-ASN1. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see...
Code Injection in elwerene/libreoffice-convert
Description The libreoffice-convert module is vulnerable against RCE since a command is crafted using user inputs not validated and then executed, leading to arbitrary command injection POC 1. Create the following PoC file: js // poc.js const libre = require'libreoffice-convert'; libre.convert'',...
