5001 matches found
SUSE CVE-2020-22219
Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...
Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.
...
CVE-2020-22219
Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...
CVE-2020-22219
Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...
AZL-28074 CVE-2020-22219 affecting package flac for versions less than 1.4.3-1
Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...
CVE-2020-22219
Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...
DEBIAN-CVE-2020-22219
Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...
CVE-2020-22219: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...
CVE-2020-22219
Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...
Libde265 derive_spatial_luma_vector_prediction Heap Buffer Overflow DoS
The vulnerability of the derivespatiallumavectorprediction function in the motion.cc component of the H.265 Libde265 codec implementation is related to buffer overflow attacks. Exploiting this vulnerability could allow attackers to access confidential data, compromise its integrity, and even caus...
EulerOS 2.0 SP9 : libwebp (EulerOS-SA-2023-2588)
According to the versions of the libwebp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to free best.bw an...
EulerOS 2.0 SP9 : libwebp (EulerOS-SA-2023-2618)
According to the versions of the libwebp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to free best.bw an...
imagemagick:encoder_miff_fuzzer: Invalid-free in RelinquishMagickMemory
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4897377839087616 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermifffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Invalid-free Crash Address:...
EulerOS Virtualization 2.10.0 : libwebp (EulerOS-SA-2023-2562)
According to the versions of the libwebp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to...
imagemagick:encoder_psd_fuzzer: Use-of-uninitialized-value in SetPSDPixel
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4757529655902208 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...
imagemagick:encoder_wpg_fuzzer: Use-of-uninitialized-value in WPGAddRLEByte
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5490519219503104 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderwpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...
imagemagick:encoder_mng_fuzzer: Use-of-uninitialized-value in EncodePixelGamma
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5370358526771200 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...
CentOS 7 : libwebp (RHSA-2023:2077)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:2077 advisory. - There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to free best.bw and assign best ...
Ubuntu 16.04 ESM : libwebp vulnerability (USN-6078-2)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6078-2 advisory. USN-6078-1 fixed a vulnerability in libwebp. This update provides the corresponding update for Ubuntu 16.04 LTS. Tenable has extracted the preceding description...
EulerOS 2.0 SP10 : libwebp (EulerOS-SA-2023-2359)
According to the versions of the libwebp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to free best.bw an...