GNU libiberty 缓冲区错误漏洞

libiberty is a collection of subroutines used by one of the GNU programs in the GNU community. A security vulnerability exists in GNU libiberty, which stems from a stack buffer overflow in the dlanglname function in d-demangle.c, which can be exploited by an attacker to potentially cause a denial...

CVE-2022-2521

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

DEBIAN-CVE-2022-2521

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

ALPINE-CVE-2022-2520

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...

CVE-2022-2520

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...

CVE-2022-2521

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

CVE-2022-2520

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...

DEBIAN-CVE-2022-2520

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...

ALPINE-CVE-2022-2521

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

AZL-10824 CVE-2020-35538 affecting package libjpeg-turbo for versions less than 2.1.4-1

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

ALPINE-CVE-2020-35538

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

CVE-2020-35538

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

CVE-2020-35538

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

CVE-2022-2520

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...

CVE-2020-35536

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

Null pointer dereference

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

Double free

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

CVE-2020-35538

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

CVE-2020-35538

CVE-2020-35538: A crafted input file could cause a NULL pointer dereference in jcopy_sample_rows() within libjpeg-turbo. The IBM Cloud Pak for Business Automation bulletin lists this CVE as affecting Cloud Pak foundational services, indicating a library-level issue that can trigger a crash/denial...

Heap overflow

An issue was discovered in the GNU C Library glibc 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the heap and prints it to the target log file, potentially revealing a portion of the contents of the heap...