Lucene search
+L

7462 matches found

GitLab Advisory Database
GitLab Advisory Database
added 2020/06/17 12:0 a.m.42 views

Loop with Unreachable Exit Condition (Infinite Loop)

The x/text package for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an...

7.5CVSS3AI score0.0184EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2020/06/17 12:0 a.m.18 views

PT-2020-13859 · Go +6 · X/Text +6

Name of the Vulnerable Software and Affected Versions: x/text package versions prior to 0.3.3 Description: The issue is related to the UTF-16 decoder in the encoding/unicode component, which could enter an infinite loop if a single byte is provided to a UTF16 decoder instantiated with UseBOM or...

7.5CVSS6.5AI score0.0473EPSS
SaveExploits3References90
ossfuzz
ossfuzz
added 2020/06/14 5:46 a.m.20 views

draco:draco_decoder_fuzzer: Crash in std::__1::_MetaBase<__can_be_converted_to_string_view<char, std::__1::char_trait

Project: https://github.com/google/draco.git Detailed Report: https://oss-fuzz.com/testcase?key=5750127758409728 Project: draco Fuzzing Engine: libFuzzer Fuzz Target: dracodecoderfuzzer Job Type: libfuzzerubsandraco Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000002242 Crash...

6.8AI score
SaveExploits0Affected Software1
Hacker One
Hacker One
added 2020/06/11 2:27 a.m.17 views

Nintendo: [3DS][SSL] Use of uninitialized class member leads to RCE in eShop movie player

Affected Systems - Platform : New Nintendo 3DS - Region: ALL - System version: 11.13 latest at the time of writing Description The eShop video player does not initialize pointers to some decoder objects when creating a video player object. With a specific audio codec this induces the use of...

0.7AI score
SaveExploits0
CNVD
CNVD
added 2020/06/08 12:0 a.m.15 views

Zephyr Code Execution Vulnerability (CNVD-2020-35962)

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. A security vulnerability exists in the MQTT packet length decoder in Zephyr 2.2.0 and later versions fixed in version 2.3.0. An attacker could exploit this vulnerability to cause memory corruption and...

9.8CVSS7AI score0.02879EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2020/05/29 8:15 p.m.26 views

CVE-2020-11043

In FreeRDP less than or equal to 2.0.0, there is an out-of-bounds read in rfxprocessmessagetileset. Invalid data fed to RFX decoder results in garbage on screen as colors. This has been patched in 2.1.0...

5CVSS6.6AI score0.01907EPSS
SaveExploits0References2
Prion
Prion
added 2020/05/29 8:15 p.m.23 views

Out-of-bounds

In FreeRDP less than or equal to 2.0.0, there is an out-of-bounds read in rfxprocessmessagetileset. Invalid data fed to RFX decoder results in garbage on screen as colors. This has been patched in 2.1.0...

5CVSS4.9AI score0.01907EPSS
SaveExploits0References3Affected Software3
Cvelist
Cvelist
added 2020/05/29 12:0 a.m.31 views

CVE-2020-11043 Out-of-bounds Read in FreeRDP

In FreeRDP less than or equal to 2.0.0, there is an out-of-bounds read in rfxprocessmessagetileset. Invalid data fed to RFX decoder results in garbage on screen as colors. This has been patched in 2.1.0...

2.2CVSS5.4AI score0.01907EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2020/05/29 12:0 a.m.23 views

CVE-2020-11043

In FreeRDP less than or equal to 2.0.0, there is an out-of-bounds read in rfxprocessmessagetileset. Invalid data fed to RFX decoder results in garbage on screen as colors. This has been patched in 2.1.0...

5CVSS5.7AI score0.01907EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2020/05/28 3:58 p.m.8 views

netty: HTTP request smuggling

A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF carriage return, line feed without being followed by SP space or HTAB horizontal tab, result in situations where headers can be misread. Dat...

9.1CVSS7.1AI score0.08914EPSS
SaveExploits1References5
OSV
OSV
added 2020/05/14 9:15 p.m.8 views

CVE-2020-0103

In a2dpaacdecodercleanup of a2dpaacdecoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android...

9.8CVSS7.8AI score0.01608EPSS
SaveExploits0References1
ossfuzz
ossfuzz
added 2020/05/14 4:48 p.m.19 views

libtheora:fuzzer-decoder: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

Detailed Report: https://oss-fuzz.com/testcase?key=5761911192027136 Project: libtheora Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-decoder Job Type: libfuzzermsanlibtheora Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: fuzzing::memory::memorytestmsan...

6.8AI score
SaveExploits0Affected Software1
Github Security Blog
Github Security Blog
added 2020/05/13 4:1 p.m.74 views

Out-of-bounds read in TensorFlow possibly causing disclosure of the contents of process memory.

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decodebmpop.cc...

6.5CVSS6.4AI score0.00569EPSS
SaveExploits0References7Affected Software2
Veracode
Veracode
added 2020/05/10 11:25 p.m.26 views

Denial Of Service (DoS)

libtasn is vulnerable to denial of service DoS. The vulnerability exists in the asn1decodesimpleber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS...

7.5CVSS4.1AI score0.02825EPSS
SaveExploits0References9Affected Software1
Veracode
Veracode
added 2020/05/10 11:25 p.m.24 views

Denial Of Service (DoS)

faad2 is vulnerable to denial of service DoS. The vulnerability exists as an invalid memory address dereference was discovered in the hfassembly function of libfaad/sbrhfadj.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. The vulnerability causes a segmentation fault and application crash,...

5.5CVSS2.9AI score0.01207EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
added 2020/05/10 11:21 p.m.39 views

Denial Of Service (DoS)

faad2 is vulnerable to denial of service DoS. It is a stack-based buffer underflow in the third instance of the calculategain function in libfaad/sbrhfadj.c in Freeware Advanced Audio Decoder 2 FAAD2. A crafted input will lead to a denial of service or possibly unspecified other impact because...

7.8CVSS4.3AI score0.01324EPSS
SaveExploits1References5Affected Software1
CNVD
CNVD
added 2020/05/06 12:0 a.m.6 views

Google TensorFlow Buffer Overflow Vulnerability (CNVD-2020-35399)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A buffer overflow vulnerability exists in the DecodeBmp function of the BMP decoder in the core/kernels/decodebmpop.cc file in Google TensorFlow versions prior to 1.7.0. An attacker can exploit...

6.5CVSS7.3AI score0.00569EPSS
SaveExploits0References1
OSV
OSV
added 2020/05/04 3:15 p.m.24 views

CVE-2018-21233

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decodebmpop.cc...

6.5CVSS6.9AI score
SaveExploits0References2
NVD
NVD
added 2020/05/04 3:15 p.m.32 views

CVE-2018-21233

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decodebmpop.cc...

6.5CVSS6.5AI score0.00569EPSS
SaveExploits0References2
PyPA
PyPA
added 2020/05/04 3:15 p.m.13 views

PYSEC-2020-253

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decodebmpop.cc...

6.5CVSS7.1AI score0.00569EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder