1594 matches found
CVE-2017-1000172
Creolabs Gravity Version: 1.0 Use-After-Free Possible code execution. An example of a Heap-Use-After-Free after the 'sublexer' pointer has been freed. Line 542 of gravitylexer.c. 'lexer' is being used to access a variable but 'lexer' has already been freed, creating a Heap Use-After-Free conditio...
CVE-2017-1000173
Creolabs Gravity Version: 1.0 Heap Overflow Potential Code Execution. By creating a large loop whiling pushing data to a buffer, we can break out of the bounds checking of that buffer. When list.join is called on the data it will read past a buffer resulting in a Heap-Buffer-Overflow...
CVE-2017-1000173
Creolabs Gravity Version: 1.0 Heap Overflow Potential Code Execution. By creating a large loop whiling pushing data to a buffer, we can break out of the bounds checking of that buffer. When list.join is called on the data it will read past a buffer resulting in a Heap-Buffer-Overflow...
CVE-2017-1000173
Creolabs Gravity Version: 1.0 Heap Overflow Potential Code Execution. By creating a large loop whiling pushing data to a buffer, we can break out of the bounds checking of that buffer. When list.join is called on the data it will read past a buffer resulting in a Heap-Buffer-Overflow...
CVE-2017-1000172
Creolabs Gravity 1.0 is affected by a Heap Use-After-Free in gravity_lexer.c (line 542) where the sublexer pointer is freed but still used via lexer , enabling possible code execution. This vulnerability is documented across multiple sources (NVD, Red Hat, CNVD, CNVD-like listings). The available...
CVE-2017-1000173
Creolabs Gravity 1.0 is affected by a heap-buffer-overflow vulnerability. The issue arises from constructing a large loop that pushes data into a buffer, allowing an out-of-bounds read when list.join is invoked, breaking bounds checking and triggering potential code execution. The CVE details exp...
CVE-2017-1000173
Creolabs Gravity Version: 1.0 Heap Overflow Potential Code Execution. By creating a large loop whiling pushing data to a buffer, we can break out of the bounds checking of that buffer. When list.join is called on the data it will read past a buffer resulting in a Heap-Buffer-Overflow...
CVE-2017-1000172
Creolabs Gravity Version: 1.0 Use-After-Free Possible code execution. An example of a Heap-Use-After-Free after the 'sublexer' pointer has been freed. Line 542 of gravitylexer.c. 'lexer' is being used to access a variable but 'lexer' has already been freed, creating a Heap Use-After-Free conditio...
CVE-2017-1000172
Creolabs Gravity Version: 1.0 Use-After-Free Possible code execution. An example of a Heap-Use-After-Free after the 'sublexer' pointer has been freed. Line 542 of gravitylexer.c. 'lexer' is being used to access a variable but 'lexer' has already been freed, creating a Heap Use-After-Free conditio...
CVE-2017-1000172: Use After Free
Creolabs Gravity Version: 1.0 Use-After-Free Possible code execution. An example of a Heap-Use-After-Free after the 'sublexer' pointer has been freed. Line 542 of gravitylexer.c. 'lexer' is being used to access a variable but 'lexer' has already been freed, creating a Heap Use-After-Free conditio...
PT-2017-10870
Name of the Vulnerable Software and Affected Versions Creolabs Gravity version 1.0 Description The issue allows for potential code execution by creating a large loop that pushes data to a buffer, breaking the bounds checking of the buffer. When list.join is called on the data, it reads past the...
CVE-2017-1000173: Out-of-bounds Read
Creolabs Gravity Version: 1.0 Heap Overflow Potential Code Execution. By creating a large loop whiling pushing data to a buffer, we can break out of the bounds checking of that buffer. When list.join is called on the data it will read past a buffer resulting in a Heap-Buffer-Overflow...
PT-2017-10869
Name of the Vulnerable Software and Affected Versions Creolabs Gravity version 1.0 Description The issue is related to a Use-After-Free condition, which can lead to possible code execution. Specifically, it is a Heap-Use-After-Free that occurs after the 'sublexer' pointer has been freed. In the...
Creolabs Gravity 'memcmp' function buffer overflow vulnerability
Creolabs Gravity is an open source lightweight embedded programming language from Creolabs, Italy. The language supports procedural programming, object-oriented programming, functional programming and data-driven programming. A buffer overflow vulnerability exists in the 'memcmp' function in...
Creolabs Gravity Stack Buffer Overflow Vulnerability
Creolabs Gravity is an open source lightweight embedded programming language from Creolabs, Italy. The language supports procedural programming, object-oriented programming, functional programming and data-driven programming. A stack buffer overflow vulnerability exists in the 'stringrepeat'...
Creolabs Gravity Heap Overflow Vulnerability
Creolabs Gravity is an open source lightweight embedded programming language from Creolabs, Italy. The language supports procedural programming, object-oriented programming, functional programming and data-driven programming. A heap overflow vulnerability exists in Creolabs Gravity version 1.0. A...
Creolabs Gravity Double Release Vulnerability
Creolabs Gravity is an open source lightweight embedded programming language from Creolabs, Italy. The language supports procedural programming, object-oriented programming, functional programming and data-driven programming. A double release vulnerability exists in gravityvalue in Creolabs Gravi...
CVE-2017-1000074
Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the stringrepeat function...