7459 matches found
Design/Logic Flaw
encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader for xml.NewTokenDecoder returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method...
OESA-2021-1061 openjpeg security update
Security Fixes: Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file because of incorrect j2kdecode, j2kreadeoc, and tcddecodetile...
OSV-2021-482 Heap-buffer-overflow in draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31587 Crash type: Heap-buffer-overflow WRITE 4 Crash state: draco::MeshPredictionSchemeTexCoordsDecoderint, draco::PredictionSchemeWrapDeco draco::MeshPredictionSchemeTexCoordsDecoderint, draco::PredictionSchemeWrapDeco...
PT-2021-2259 · Cisco · Snort
Name of the Vulnerable Software and Affected Versions: Cisco products affected versions not specified Description: The issue is related to improper handling of error conditions when processing Ethernet frames in the Snort detection engine, which could allow an unauthenticated, adjacent attacker t...
Tencent WeChat WXAM Decoder Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...
CVE-2020-27874
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...
CVE-2020-27874
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM...
CVE-2020-27874
The CVE-2020-27874 entry concerns Tencent WeChat 7.0.18 with a vulnerability in the WXAM Decoder. The flaw results from improper validation of user-supplied data, causing memory access past the end of an allocated object and leading to remote code execution. Exploitation requires user interaction...
OSV-2021-315 Global-buffer-overflow in Gfx::decode_frame
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30507 Crash type: Global-buffer-overflow READ 4 Crash state: Gfx::decodeframe Gfx::GIFImageDecoderPlugin::frame Gfx::GIFImageDecoderPlugin::bitmap...
Accusoft ImageGear GIF LZW decoder heap overflow vulnerability
Summary A heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in Accusoft ImageGear 19.8. A specially crafted malformed file can trigger a heap overflow, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this...
Tencent WeChat WXAM Decoder Out-Of-Bounds Access Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM Decoder. T...
The vulnerability of the Microsoft DTV-DVD Video decoder for the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft DTV-DVD video decoder for the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
NVIDIA SHIELD TV 缓冲区错误漏洞
Nvidia NVIDIA Shield TV is a streaming media player. The Nvidia NVIDIA Shield TV NVDEC suffers from a buffer overflow vulnerability that can be exploited by a remote attacker to submit a special request, which can be used to conduct a denial of service attack or elevation of privilege...
ZynOS rom-0 Flaw Scanner
!/usr/bin/perl ZynOS rom-0 Flaw Scanner Copyright 2021 c Todor Donev https://donev.eu/ $ perl zynosscanner ZynOS rom-0 Flaw Scanner zynosscanner --targets= --threads=10 --redirects=7 --help --targets | Specify the list with addresses that you want to scan. --dump | Dump rom-0 file for each target...
CVE-2021-1668
Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability...
CVE-2021-1668
Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability...
Remote code execution
Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability...
