11080 matches found
libreoffice:tiffuzzer: Heap-buffer-overflow in putcontig8bitYCbCr22tile
Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5093649717002240 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: tiffuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
Mozilla Firefox Security Vulnerability
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a security vulnerability that originates in VideoBridge that allows any process to use a structure generated by a remote decoder, resulting in an attacker being able to...
PT-2023-7974
Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 115.6 Thunderbird versions prior to 115.6 Firefox versions prior to 121 Description The VideoBridge component allowed any content process to use textures produced by remote decoders, which could be abused to escap...
at51 (>=0.1.1, <=0.4.1), atrac3p-decoder (>=0.1.0, <=0.1.2) +42 more potentially affected by CVE-2023-53156 via transpose (0.1.0)
transpose CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transpose and may be impacted: - at51 =0.1.1, =0.1.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =0.6.0, =0.1.0, =0.1.0, =0.4.2 and more Source cves:...
libavc:svc_dec_fuzzer: Crash in ih264d_filter_boundary_left_nonmbaff
Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=4827771779809280 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: svcdecfuzzer Job Type: libfuzzermsanlibavc Platform Id: linux...
PT-2023-35649 · Git +1 · Libavc
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap buffer overflow issue was identified, potentially causing a crash. The crash occurs in the ih264d format convert function, which is called by isvc...
OESA-2023-1905 netty security update
Asynchronous event-driven network application Java framework. Security Fixes: Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion...
CVE-2023-37329
A heap-based buffer overflow vulnerability was found in the PGS Blu-ray subtitle decoder within GStreamer when processing specific files. This issue could allow a malicious third party to crash the application and execute code by manipulating the heap. Mitigation Mitigation for this issue is eith...
libavc:svc_dec_fuzzer: Heap-buffer-overflow in isvcd_start_of_pic
Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=6312187152695296 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: svcdecfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux...
libavc:svc_dec_fuzzer: Heap-buffer-overflow in ih264d_format_convert
Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=6176978839142400 Project: libavc Fuzzing Engine: afl Fuzz Target: svcdecfuzzer Job Type: aflasanlibavc Platform Id: linux Crash Type:...
libavc:svc_dec_fuzzer: Heap-buffer-overflow in ih264d_compute_bs_non_mbaff
Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=4688779507793920 Project: libavc Fuzzing Engine: afl Fuzz Target: svcdecfuzzer Job Type: aflasanlibavc Platform Id: linux Crash Type:...
BmpDecoderDxe Image Processing Module UEFI Patch System Failure
The vulnerability of the Image Processing Module in the InsydeH2O UEFI firmware development framework involves a buffer overflow when processing the PixelHeight and PixelWidth properties of images. Exploiting this vulnerability can allow an attacker to cause system failures...
graphicsmagick:coder_JXL_fuzzer: Global-buffer-overflow in jxl::Status jxl::DecodeACVarBlock<
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4954515987890176 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJXLfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Global-buffer-overflow RE...
Candid infinite decoding loop through specially crafted payload
Impact The Candid library causes a Denial of Service while parsing a specially crafted payload with empty data type. For example, if the payload is record ; empty and the canister interface expects record then the rust candid decoder treats empty as an extra field required by the type. The proble...
UBUNTU-CVE-2023-6245
The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is record ; empty and the canister interface expects record then the Rust candid decoder treats empty as an extra field required by the type. The problem wit...
Design/Logic Flaw
The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is record ; empty and the canister interface expects record then the Rust candid decoder treats empty as an extra field required by the type. The problem wit...
CVE-2023-6245 Infinite decoding loop through specially crafted payload
The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is record ; empty and the canister interface expects record then the Rust candid decoder treats empty as an extra field required by the type. The problem wit...
RUSTSEC-2023-0073 Infinite decoding loop through specially crafted payload
The Candid library causes a Denial of Service while parsing a specially crafted payload with empty data type. For example, if the payload is record ; empty and the canister interface expects record then the rust candid decoder treats empty as an extra field required by the type. The problem with...
CVE-2023-40238
A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before 05.60.47 for certain Lenovo devices. Image parsing of crafted BMP logo files can copy data to a specific address duri...
PT-2023-8961
Name of the Vulnerable Software and Affected Versions libheif version 1.17.5 Description The issue is related to a segmentation violation in the UncompressedImageCodec::get luma bits per pixel from configuration unci function of the libheif decoder and encoder. This could allow a remote attacker ...