SUSE-SU-2022:0163-1 Security update for zxing-cpp

This update for zxing-cpp fixes the following issues: - CVE-2021-28021: Fixed buffer overflow vulnerability in function stbiextendreceive in stbimage.h via a crafted JPEG file. bsc1191743. - CVE-2021-42715: Fixed buffer overflow in stbimage PNM loader bsc1191942. - CVE-2021-42716: Fixed denial of...

OPENSUSE-SU-2022:0157-1 Security update for zxing-cpp

This update for zxing-cpp fixes the following issues: - CVE-2021-28021: Fixed buffer overflow vulnerability in function stbiextendreceive in stbimage.h via a crafted JPEG file. bsc1191743. - CVE-2021-42715: Fixed buffer overflow in stbimage PNM loader bsc1191942. - CVE-2021-42716: Fixed denial of...

SUSE-SU-2022:0157-1 Security update for zxing-cpp

This update for zxing-cpp fixes the following issues: - CVE-2021-28021: Fixed buffer overflow vulnerability in function stbiextendreceive in stbimage.h via a crafted JPEG file. bsc1191743. - CVE-2021-42715: Fixed buffer overflow in stbimage PNM loader bsc1191942. - CVE-2021-42716: Fixed denial of...

Security update for zxing-cpp (important)

openSUSE Security Update: Security update for zxing-cpp Announcement ID: openSUSE-SU-2022:0157-1 Rating: important References: 1191743 1191942 1191944 Cross-References: CVE-2021-28021 CVE-2021-42715 CVE-2021-42716 CVSS scores: CVE-2021-28021 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H...

GitHub Security Lab: ihsinme: CPP Add a query to find incorrectly used exceptions.

This bug was reported directly to GitHub Security Lab...

The vulnerability of the url.cpp component in the Libproxy configuration management library, due to a lack of mechanism for checking the size of copied data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the url.cpp component in the Libproxy configuration management library is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability could allow an attacker operating remotely to gain access to confidential data, compromise its...

SUSE-FU-2022:0039-1 Feature update for zxing-cpp libreoffice

This feature update for zxing-cpp and libreoffice fixes the following issues: Update LibreOffice from version 7.1.3.2 to 7.2.3.2 jscSLE-18213: - Fix external URL connections issues when WebDav is built using libserf. bsc1187173, bsc1186871 - Fix an issue with PPTX where one column becomes two...

PT-2021-13405 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12 Description: In the PVInitVideoEncoder function of mp4enc api.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution...

CVE-2021-35346

tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function HevcSpsUnit::shorttermrefpicsetint in hevc.cpp...

CVE-2021-36051

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a specially-crafted .cpp file...

Buffer overflow

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a specially-crafted .cpp file...

CVE-2021-36051 XMP Toolkit SDK Buffer Overflow Could Lead To Arbitrary Code Execution

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a specially-crafted .cpp file...

CVE-2021-36051

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a specially-crafted .cpp file...

Pdftools 代码问题漏洞

PDFTools is a tool for converting PDF files to ePUB format. A null pointer dereference vulnerability exists in the Analyze::AnalyzeRoot function in analyze.cpp in PDFTools 20200714 and earlier versions. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2021-33191

From Apache NiFi MiNiFi C++ version 0.5.0 the c2 protocol implements an "agent-update" command which was designed to patch the application binary. This "patching" command defaults to calling a trusted binary, but might be modified to an arbitrary value through a "c2-update" command. Said command ...

GitHub Security Lab: ihsinme: CPP Add query for CWE-783 Operator Precedence Logic Error When Use Bool Type

This bug was reported directly to GitHub Security Lab...

Vulnerabilities fixed in Bosch IP Cameras

Bosch has fixed vulnerabilities in IP cameras CPP4, CPP6, CPP7, CPP13 and AVIOTEC. An unauthenticated malicious person at remote can exploit the vulnerabilities to cause a denial-of-service, obtaining sensitive information, manipulating manipulate camera settings or perform a cross-site scripting...

Bosch IP cameras 访问控制错误漏洞

Bosch IP cameras are German Bosch network cameras A security vulnerability in Bosch IP cameras, which stems from a lack of authentication in a critical function of the cameras, allows an unauthenticated remote attacker to extract sensitive information or change camera settings by sending a crafte...

GitHub Security Lab: ihsinme: CPP Add query for CWE-1126: Declaration of Variable with Unnecessarily Wide Scope

This bug was reported directly to GitHub Security Lab...

CVE-2021-23847

A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information or change settings of the camera by sending crafted requests to the device. Only devices of the CPP6, CPP7 and CPP7.3 family with firmware 7.70, 7.72, and...