PT-2021-26894

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.221 Description A memory leak issue was discovered in the nfp cpp area cache add function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2021-27058

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.8 Description A memory leak issue was discovered in the nfp cpp area cache add function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v5.15.8,...

PT-2021-26975

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.85 Description A memory leak issue was discovered in the nfp cpp area cache add function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2021-26870

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.258 Description A memory leak issue was discovered in the nfp cpp area cache add function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2021-26923

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.165 Description A memory leak issue was discovered in the nfp cpp area cache add function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2021-13405 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12 Description: In the PVInitVideoEncoder function of mp4enc api.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution...

PT-2024-11475

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been resolved in the Linux kernel. The problem occurs when the nfp cpp area alloc function allocates and initializes a CPP area structure, but this structure is n...

CVE-2021-35346

tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function HevcSpsUnit::shorttermrefpicsetint in hevc.cpp...

CVE-2021-36051

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a specially-crafted .cpp file...

Buffer overflow

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a specially-crafted .cpp file...

CVE-2021-36051

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a specially-crafted .cpp file...

CVE-2021-36051 XMP Toolkit SDK Buffer Overflow Could Lead To Arbitrary Code Execution

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a specially-crafted .cpp file...

CVE-2021-36051

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a specially-crafted .cpp file...

CVE-2021-36051: Heap-based Buffer Overflow

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a specially-crafted .cpp file...

Pdftools 代码问题漏洞

PDFTools is a tool for converting PDF files to ePUB format. A null pointer dereference vulnerability exists in the Analyze::AnalyzeRoot function in analyze.cpp in PDFTools 20200714 and earlier versions. An attacker could exploit this vulnerability to cause a denial of service...

opencensus-cpp:grpc_tags_bin_fuzzer: Use-of-uninitialized-value in std::__1::__hash_iterator<std::__1::__hash_node<std::__1::__hash_value_type<std:

Detailed Report: https://oss-fuzz.com/testcase?key=6351351316086784 Project: opencensus-cpp Fuzzing Engine: libFuzzer Fuzz Target: grpctagsbinfuzzer Job Type: libfuzzermsanopencensus-cpp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

CVE-2021-33191

From Apache NiFi MiNiFi C++ version 0.5.0 the c2 protocol implements an "agent-update" command which was designed to patch the application binary. This "patching" command defaults to calling a trusted binary, but might be modified to an arbitrary value through a "c2-update" command. Said command ...

GitHub Security Lab: ihsinme: CPP Add query for CWE-783 Operator Precedence Logic Error When Use Bool Type

This bug was reported directly to GitHub Security Lab...

opencensus-cpp:cloud_trace_context_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4879760055468032 Project: opencensus-cpp Fuzzing Engine: libFuzzer Fuzz Target: cloudtracecontextfuzzer Job Type: libfuzzermsanopencensus-cpp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fb0516cf994 Crash State: NULL Sanitizer:...

Vulnerabilities fixed in Bosch IP Cameras

Bosch has fixed vulnerabilities in IP cameras CPP4, CPP6, CPP7, CPP13 and AVIOTEC. An unauthenticated malicious person at remote can exploit the vulnerabilities to cause a denial-of-service, obtaining sensitive information, manipulating manipulate camera settings or perform a cross-site scripting...