Buffer overflow

libde265 v1.0.4 contains a global buffer overflow in the decodeCABACbit function, which can be exploited via a crafted a file...

CVE-2020-21596

libde265 v1.0.4 contains a global buffer overflow in the decodeCABACbit function, which can be exploited via a crafted a file...

Heap overflow

libde265 v1.0.4 contains a heap buffer overflow in the ffhevcputunweightedpred8sse function, which can be exploited via a crafted a file...

Heap overflow

libde265 v1.0.4 contains a heap buffer overflow in the de265image::availablezscan function, which can be exploited via a crafted a file...

CVE-2020-21599

libde265 v1.0.4 contains a heap buffer overflow in the de265image::availablezscan function, which can be exploited via a crafted a file...

CVE-2020-21606

libde265 v1.0.4 contains a heap buffer overflow fault in the putepel16fallback function, which can be exploited via a crafted a file...

CVE-2020-21604

libde265 v1.0.4 contains a heap buffer overflow fault in the mmloadlepi64 function, which can be exploited via a crafted a file...

CVE-2020-21597

libde265 v1.0.4 contains a heap buffer overflow in the mcchroma function, which can be exploited via a crafted a file...

CVE-2020-21594

CVE-2020-21594 affects libde265, specifically a heap buffer overflow in the put_epel_hv_fallback function of version 1.0.4. Multiple connected advisories confirm this vulnerability and its remediation path. The issue can be triggered by processing a crafted media file, leading to potential denial...

CVE-2020-21595

CVE-2020-21595 affects libde265 v1.0.4, with a heap buffer overflow in the mc_luma function exploitable by crafted files. Public entries reference libde265 fixes (1.0.11) via Debian security advisories and Gentoo GLSA; Astra/Linux and CNVD entries corroborate the same issue. No exploit details or...

CVE-2020-21600

Summary of CVE-2020-21600 : libde265 version 1.0.4 contains a heap buffer overflow in the function put_weighted_pred_avg_16_fallback. This can be exploited via a crafted file, potentially leading to denial of service or arbitrary code execution per publicly referenced notes. Public advisories acr...

CVE-2020-21603

libde265 v1.0.4 contains a heap buffer overflow in the putqpel00fallback16 function, which can be exploited via a crafted a file...

CVE-2020-21602

libde265 v1.0.4 contains a heap buffer overflow in the putweightedbipred16fallback function, which can be exploited via a crafted a file...

PT-2021-4687 · Canonical +1 · Apport +2

Name of the Vulnerable Software and Affected Versions: apport versions prior to 2.14.1-0ubuntu3.29+esm8 apport versions prior to 2.20.1-0ubuntu2.30+esm2 apport versions prior to 2.20.9-0ubuntu7.26 apport versions prior to 2.20.11-0ubuntu27.20 apport versions prior to 2.20.11-0ubuntu65.3...

ROS-2-1870

2.1870 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability...

An unspecified vulnerability exists in rConfig (CNVD-2021-70096)

rConfig is an open source web configuration management utility. rConfig version 3.9.6 contains a security vulnerability in lib/AjaxHandlers/ajaxEditTemplate.php, which can be exploited by attackers to execute arbitrary code via specially crafted files...

CVE-2021-38711

In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files...

Vmware Spring Framework Elevation of Privilege Vulnerability

Vmware Spring Framework is the United States, Vmware Vmware company's set of open source Java, JavaEE application framework. The framework helps developers build high-quality applications . An elevation of privilege vulnerability exists in Vmware Spring Framework, which can be exploited by an...

Foxit Reader U3D File Parsing Double Release Remote Code Execution Vulnerability

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A double release remote code execution vulnerability exists in Foxit Reader U3D file parsing. The vulnerability stems from not verifying the existence of an object before performing further release operations on it. An attacke...

Foxit Reader Code Execution Vulnerability (CNVD-2021-38092)

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...