Heap overflow

libde265 v1.0.4 contains a heap buffer overflow in the putweightedbipred16fallback function, which can be exploited via a crafted a file...

CVE-2020-21599

libde265 v1.0.4 contains a heap buffer overflow in the de265image::availablezscan function, which can be exploited via a crafted a file...

CVE-2020-21604

libde265 v1.0.4 contains a heap buffer overflow fault in the mmloadlepi64 function, which can be exploited via a crafted a file...

CVE-2020-21605

libde265 v1.0.4 contains a segmentation fault in the applysaointernal function, which can be exploited via a crafted a file...

CVE-2020-21599

libde265 v1.0.4 contains a heap buffer overflow in the de265image::availablezscan function, which can be exploited via a crafted a file...

CVE-2020-21596

libde265 v1.0.4 contains a global buffer overflow in the decodeCABACbit function, which can be exploited via a crafted a file...

CVE-2020-21594

libde265 v1.0.4 contains a heap buffer overflow in the putepelhvfallback function, which can be exploited via a crafted a file...

CVE-2020-21601

libde265 v1.0.4 contains a stack buffer overflow in the putqpelfallback function, which can be exploited via a crafted a file...

CVE-2020-21600

libde265 v1.0.4 contains a heap buffer overflow in the putweightedpredavg16fallback function, which can be exploited via a crafted a file...

CVE-2020-21602

libde265 v1.0.4 contains a heap buffer overflow in the putweightedbipred16fallback function, which can be exploited via a crafted a file...

CVE-2020-21596

libde265 v1.0.4 contains a global buffer overflow in the decodeCABACbit function, which can be exploited via a crafted a file...

CVE-2020-21606

libde265 v1.0.4 contains a heap buffer overflow fault in the putepel16fallback function, which can be exploited via a crafted a file...

Integer overflow

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow when processing an atom using the 'ssix' FOURCC code, due to unchecked arithmetic...

MGASA-2021-0392 Updated libsndfile packages fix security vulnerability

Updated libsndfile packages fix security vulnerability: A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file CVE-2021-3246...

3s-smart Software Solutions CODESYS Development System 代码问题漏洞

3s-smart Software Solutions CODESYS Development System is a set of programming tools for the field of industrial controllers and automation technology from 3S-Smart Software Solutions 3s-smart Software Solutions, Germany. A code issue vulnerability exists in the PackageManagement.plugin...

CVE-2021-21794

An out-of-bounds write vulnerability exists in the TIF bitspersample processing functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

WordPress WP SVG images Plugin Cross-Site Scripting Vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL server set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress WP S...

The vulnerability of the MogrifyImageList function in the MagickWand/mogrify.c component of the console-based ImageMagick graphics editor allows a hacker to trigger a service failure by exploiting a deficiency in the use of the assert() function.

The vulnerability of the MogrifyImageList function in the MagickWand/mogrify.c component of the console-based ImageMagick graphics editor is related to the insufficient use of the assert function. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a speciall...

Interactive Graphical SCADA System (IGSS) Remote Code Execution Vulnerability

The Schneider Electric Interactive Graphical SCADA System IGSS is an advanced SCADA system for monitoring and controlling industrial processes. A remote code execution vulnerability exists in the Definition module of Interactive Graphical SCADA System IGSS versions 15.0.0.21140 and earlier. The...

Interactive Graphical SCADA System (IGSS) Out-of-Bounds Read Vulnerability

The Schneider Electric Interactive Graphical SCADA System IGSS is an advanced SCADA system for monitoring and controlling industrial processes. An out-of-bounds read vulnerability exists in the Definition module of Interactive Graphical SCADA System IGSS versions 15.0.0.21140 and earlier. The...