1248 matches found
UBUNTU-CVE-2021-44331
ARM astcenc 3.2.0 is vulnerable to Buffer Overflow in function encodeise...
CVE-2021-43086
ARM astcenc 3.2.0 is vulnerable to Buffer Overflow. When the compression function of the astc-encoder project with -cl option was used, a stack-buffer-overflow occurred in function encodeise in function compresssymbolicblockforpartition2planes in "/Source/astcenccompresssymbolic.cpp"...
PT-2022-11775
Name of the Vulnerable Software and Affected Versions ARM astcenc version 3.2.0 Description The issue is related to a Buffer Overflow vulnerability. When the compression function of the astc-encoder project is used with the -cl option, a stack-buffer-overflow occurs in the encode ise function,...
PT-2022-12042
Name of the Vulnerable Software and Affected Versions ARM astcenc version 3.2.0 Description The issue is related to a Buffer Overflow in the encode ise function. Recommendations For ARM astcenc version 3.2.0, consider disabling the encode ise function as a temporary workaround until a patch is...
bitcoin-core:rpc: Use-of-uninitialized-value in bech32::Encode
Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=6027634402787328 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: rpc Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
Denial Of Service (DoS)
UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...
open62541:fuzz_json_decode_encode: Heap-buffer-overflow in extensionObjectOrder
Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5663845975195648 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzjsondecodeencode Job Type: aflasanopen62541 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...
CVE-2021-45385
A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 2021-12-06 in bmpload. When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to pb-pdata and did not exit the program. So the program crashes when it tries to access the pb-data, i...
CVE-2021-45385
A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 2021-12-06 in bmpload. When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to pb-pdata and did not exit the program. So the program crashes when it tries to access the pb-data, i...
CVE-2021-44957
Global buffer overflow vulnerability exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23705. Issue is in the jfifencode function at ffjpeg/src/jfif.c line 708 could cause a Denial of Service by using a crafted jpeg file...
CVE-2021-44957
Global buffer overflow vulnerability exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23705. Issue is in the jfifencode function at ffjpeg/src/jfif.c line 708 could cause a Denial of Service by using a crafted jpeg file...
ffjpeg buffer error vulnerability
ffjpeg is a JPEG encoder/decoder. A buffer overflow vulnerability exists in ffjpeg, which stems from the jfifencode function in the product/src/jfif.c file failing to properly handle memory boundaries, and can be exploited by attackers to cause a denial of service via special jpeg files...
Wing FTP Server 4.3.8 - Remote Code Execution (Authenticated) Exploit
Exploit Title: Wing FTP Server 4.3.8 - Remote Code Execution RCE Authenticated Exploit Author: notcos Credit: Credit goes to the initial discoverer of this exploit, Alex Haynes. Vendor Homepage: https://www.wftpserver.com/ Software Link: https://www.wftpserver.com/download/WingFtpServer.exe...
PT-2022-6564 · Ffjpeg · Ffjpeg
Name of the Vulnerable Software and Affected Versions: ffjpeg versions prior to 01.01.2021 Description: The issue is a global buffer overflow that could cause a Denial of Service by using a crafted jpeg file. It is similar to a previously known issue. The problem lies in the jfif encode function ...
Wing FTP Server 4.3.8 - Remote Code Execution (RCE) (Authenticated)
Exploit Title: Wing FTP Server - Authenticated RCE Date: 02/06/2022 Exploit Author: notcos Credit: Credit goes to the initial discoverer of this exploit, Alex Haynes. Vendor Homepage: https://www.wftpserver.com/ Software Link: https://www.wftpserver.com/download/WingFtpServer.exe Version: " %...
Mageia: Security Advisory (MGASA-2021-0527)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-5033-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
UltraJSON vulnerable to Out-of-bounds Write
UltraJSON aka ujson 1.34 through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode...
