PT-2022-9212

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.10 Description An improper array index validation issue exists in the JPEG-JFIF Scan header parser functionality. A specially-crafted file can lead to an out-of-bounds write and potential code execution. An attack...

CVE-2021-21949: Improper Validation of Array Index

An improper array index validation vulnerability exists in the JPEG-JFIF Scan header parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to an out-of-bounds write and potential code exectuion. An attacker can provide a malicious file to trigger this vulnerability...

Accusoft ImageGear JPEG-JFIF Scan header parser out-of-bounds write vulnerability

Summary An improper array index validation vulnerability exists in the JPEG-JFIF Scan header parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to an out-of-bounds write and potential code exectuion. An attacker can provide a malicious file to trigger this...

GO-2021-0157

The MIME header parser treated spaces and hyphens as equivalent, which can permit HTTP request smuggling...

PT-2022-28296

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue concerns the MIME header parser, where it treats spaces and hyphens as equivalent. This can lead to HTTP request smuggling. Recommendations At the moment, there is no informatio...

GHSA-CVFM-XJC8-F2VM Denial of Service in @commercial/subtext

Version 5.1.1 of @commercial/subtext is vulnerable to Denial of Service. The Content-Encoding HTTP header parser has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. Because hapi rethrows system errors as opposed to catching expecte...

Denial of Service in @hapi/accept

Versions of @hapi/accept prior to 3.2.4 or 5.0.1 are vulnerable to Denial of Service. The Accept-Encoding HTTP header parser has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. Because hapi rethrows system errors as opposed to...

GHSA-9VRW-M88G-W75Q Denial of Service in @hapi/accept

Versions of @hapi/accept prior to 3.2.4 or 5.0.1 are vulnerable to Denial of Service. The Accept-Encoding HTTP header parser has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. Because hapi rethrows system errors as opposed to...

PT-2020-21254

Name of the Vulnerable Software and Affected Versions @commercial/subtext version 5.1.1 Description The Content-Encoding HTTP header parser in the @commercial/subtext module has a vulnerability that can cause a system error when encountering invalid values in the header. This error can lead to th...

PT-2020-21054

Name of the Vulnerable Software and Affected Versions subtext versions 4.1.0 and later Description The issue affects the Content-Encoding HTTP header parser, which can cause a system error when encountering invalid values in the header. This error is not caught and can propagate up the stack,...

websocket-extensions -- ReDoS vulnerability

Changelog: Remove a ReDoS vulnerability in the header parser CVE-2020-7663...

Denial of Service

Overview Versions of @hapi/accept prior to 3.2.4 or 5.0.1 are vulnerable to Denial of Service. The Accept-Encoding HTTP header parser has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. Because hapi rethrows system errors as oppose...

CVE-2019-5076

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG header-parser of the Accusoft ImageGear 19.3.0 library. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victio...

CVE-2019-5076

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG header-parser of the Accusoft ImageGear 19.3.0 library. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victio...

CVE-2019-5076

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG header-parser of the Accusoft ImageGear 19.3.0 library. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victio...

CVE-2019-5076: Out-of-bounds Write

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG header-parser of the Accusoft ImageGear 19.3.0 library. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victio...

PT-2019-17458

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.3.0 Description An out-of-bounds write issue exists in the igcore19d.dll PNG header-parser. A specially crafted PNG file can cause this issue, resulting in remote code execution. An attacker needs to provide a...

envoy/header_parser_fuzz_test: Crash in Envoy::Router::StreamInfoHeaderFormatter::StreamInfoHeaderFormatter

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5702537941876736 Project: envoy Fuzzer: libFuzzerenvoyheaderparserfuzztest Fuzz target binary: headerparserfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash...

CVE-2018-6924

In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE-p12, insufficient validation in the ELF header parser could allow a malicious ELF binary to cause a kernel crash or disclose kernel memory...

CVE-2018-6924

In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE-p12, insufficient validation in the ELF header parser could allow a malicious ELF binary to cause a kernel crash or disclose kernel memory...