3818 matches found
openjpeg: Heap-based buffer overflow in opj_t1_clbl_decode_processor()
A heap-based buffer overflow flaw was found in openjpeg in the opjt1clbldecodeprocessor in libopenjp2.so. Affecting versions through 2.3.1, the highest threat from this vulnerability is to file confidentiality and integrity as well as system availability...
PT-2020-2776 · Openjpeg +6 · Openjpeg +6
Name of the Vulnerable Software and Affected Versions: OpenJPEG versions 2.3.1 through 2020-01-28 Description: The issue is related to a heap-based buffer overflow in the opj t1 clbl decode processor function of the OpenJPEG library, specifically in the openjp2/t1.c file when qmfbid==1. This can ...
CVE-2020-7226
CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data...
CVE-2020-7226
CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data...
CVE-2020-7226: Allocation of Resources Without Limits or Throttling
CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data...
CVE-2020-7595
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...
PT-2020-19361 · Unknown +1 · Libiec61850 +1
Name of the Vulnerable Software and Affected Versions: libIEC61850 versions prior to 1.4.1 Description: The issue arises from a heap-based buffer overflow in the MmsValue decodeMmsData function when parsing the MMS BIT STRING data type. This occurs in the mms/iso mms/server/mms access result.c fi...
ALPINE-CVE-2020-6851
OpenJPEG through 2.3.1 has a heap-based buffer overflow in opjt1clbldecodeprocessor in openjp2/t1.c because of lack of opjj2kupdateimagedimensions validation...
OpenJPEG heap buffer overflow vulnerability (CNVD-2020-02456)
OpenJPEG is a C-based open source JPEG2000 codec . A buffer overflow vulnerability exists in the 'opjt1clbldecodeprocessor' function in the libopenjp2.so file in OpenJPEG 2.3.1 and earlier versions. The vulnerability stems from a networked system or product performing operations in memory without...
GNU LibreDWG Memory Allocation Failure Vulnerability
LibreDWG is a free C library for reading and writing DWG files. A memory allocation failure vulnerability exists in readsectionsmap in decoder2007.c in LibreDWG 0.9.3.2564. An attacker can exploit this vulnerability to allocate too much memory in readsectionsmap in decoder2007.c...
GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2020-04064)
LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in readpagesmap in decoder2007.c in GNU LibreDWG 0.9.3.2564. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...
GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2020-04068)
LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in copycompressedbytes in decoder2007.c in LibreDWG 0.9.3.2564. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...
Heap overflow
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in readpagesmap in decoder2007.c...
PT-2020-19181 · Gnu +1 · Gnu Libredwg +1
Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.9.3.2564 Description: The issue is related to a heap-based buffer over-read in the bfr read function located in decode.c. Recommendations: For GNU LibreDWG version 0.9.3.2564, consider updating to a newer version that...
PT-2020-19179 · Gnu +1 · Gnu Libredwg +1
Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.9.3.2564 Description: The issue is related to a heap-based buffer over-read in the copy compressed bytes function located in decode r2007.c. Recommendations: For GNU LibreDWG version 0.9.3.2564, consider updating to a...
ALPINE-CVE-2020-5312
libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...
DEBIAN-CVE-2020-5311
libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow...
DEBIAN-CVE-2020-5312
libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...