692 matches found
CVE-2021-43304
Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopyop, ip, copyend, don’t exceed the destination buffer’s limits...
Heap overflow
A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420torgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg...
OSV-2022-128 Stack-buffer-overflow in decompress_rNUMBER
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44432 Crash type: Stack-buffer-overflow WRITE 1 Crash state: decompressrNUMBER readrNUMBERmetadata dwgdecode...
The vulnerability of the `ntfs_decompress` function in the NTFS file system driver for the FUSE NTFS-3G module arises from writing beyond the buffer boundaries in memory. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the ntfsdecompress function in the NTFS file system driver for the FUSE NTFS-3G module is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service...
Grok Buffer Overflow Vulnerability
Grok is a regular expression that uses a combination of multiple predefined . A tool used to match split text and map to keywords. Often used to preprocess log data. A buffer overflow vulnerability exists in Grok version 9.5.0, which stems from the product's openhtj2k::T1OpenHTJ2K::decompress...
CVE-2021-45935
Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress called from std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco and std::1::packagedtaskint...
DEBIAN-CVE-2021-45935
Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress called from std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco and std::1::packagedtaskint...
CVE-2021-45935
Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress called from std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco and std::1::packagedtaskint...
Heap overflow
Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress called from std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco and std::1::packagedtaskint...
Grok 缓冲区错误漏洞
Grok is a regular expression that uses a combination of multiple predefined . A tool used to match split text and map to keywords. Often used to preprocess log data. A buffer overflow vulnerability exists in Grok version 9.5.0, which stems from the product's openhtj2k::T1OpenHTJ2K::decompress...
CVE-2021-45935
Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress called from std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco and std::1::packagedtaskint...
CVE-2021-45935
Summary: CVE-2021-45935 affects Grok 9.5.0 and involves a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress (invoked via std::__1::__packaged_task_func and related bindings). Impact (as per sources): NVD indicates a base score of 4.3 (MEDIUM) under CVSS v2, and 5.5 (MEDIUM) under C...
CVE-2021-45935
Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress called from std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco and std::1::packagedtaskint...
CVE-2021-45935: Out-of-bounds Write
Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress called from std::1::packagedtaskfunc...
A crafted NTFS image can cause an out-of-bounds access in ntfs_decompress in NTFS-3G < 2021.8.22.
...
OSV-2021-1645 UNKNOWN READ in ndlz4_decompress
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41636 Crash type: UNKNOWN READ Crash state: ndlz4decompress bloscd dojob...
CLSA-2021-1635459154 Fix CVE(s): CVE-2021-28831
SECURITY UPDATE: operation on invalid pointer - debian/patches/CVE-2021-28831.patch: decompressgunzip.c mishandles the error bit on the huftbuild result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data. - CVE-2021-28831...
CVE-2020-28963
Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow via the decompress function...