CVE-2021-31292

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service DOS via crafted metadata...

CVE-2021-31292

Exiv2 vulnerability CVE-2021-31292: an integer overflow in CrwMap::encode0x1810 in Exiv2 0.27.3 allows a heap-based buffer overflow via crafted metadata, enabling a denial of service. The issue affects Exiv2’s image metadata handling (library and related tooling) and is addressed by upgrading to ...

Denial Of Service (DoS)

hdf5 is vulnerable to denial of service. A heap-based buffer over-read exists in the function H5Olayoutdecode in H5Olayout.c allows an attacker to cause crash the application...

Information Disclosure

hdf5 is vulnerable to information disclosure. The vulnerability exists due to a heap-based buffer over-read in the function H5Olinkdecode in H5Olink.c...

Denial Of Service(DoS)

objstack in GNU Aspell is vulnerable to denial of sevice. The vulnerability exists because of a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

CVE-2021-36978

QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in PlASCII85Decoder::write called from PlAESPDF::flush and PlAESPDF::finish when a certain downstream write fails...

CVE-2020-19609

Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiffexpandcolormap function when parsing TIFF files allowing attackers to cause a denial of service...

CVE-2020-19609

CVE-2020-19609 affects Artifex MuPDF: a heap-based buffer overwrite in tiff_expand_colormap() when parsing TIFF files can cause denial of service. The vulnerability is present in MuPDF before 1.18.0. OpenSUSE/OpenSUSE-SU-2021:1341-1 and Debian/DLA-2765-1 reference this issue alongside CVE-2020-16...

RHEL 8 : perl (RHSA-2021:2792)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2792 advisory. Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: per...

EulerOS Virtualization 3.0.2.2 : ghostscript (EulerOS-SA-2021-2135)

According to the versions of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Ghostscript is a set of software that provides a PostScriptinterpreter, a set of C procedures the Ghostscript library,...

Moderate: Red Hat Security Advisory: perl security and bug fix update

An update for perl is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

CVE-2021-36978

QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in PlASCII85Decoder::write called from PlAESPDF::flush and PlAESPDF::finish when a certain downstream write fails...

CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

CVE-2020-36428

matio aka MAT File I/O Library 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble called from ReadInt32Data and MatVarRead4...

CVE-2021-36977

matio aka MAT File I/O Library 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MMmemcpy called from H5MMmalloc and H5Cloadentry, related to use of HDF5 1.12.0...

CVE-2021-36978

QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in PlASCII85Decoder::write called from PlAESPDF::flush and PlAESPDF::finish when a certain downstream write fails...

CVE-2020-36428

matio aka MAT File I/O Library 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble called from ReadInt32Data and MatVarRead4...

Heap overflow

QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in PlASCII85Decoder::write called from PlAESPDF::flush and PlAESPDF::finish when a certain downstream write fails...

CVE-2021-36977

CVE-2021-36977 affects matio (MAT File I/O Library) 1.5.20 and 1.5.21, with a heap-based buffer overflow in H5MM_memcpy called from H5MM_malloc and H5C_load_entry, related to using HDF5 1.12.0. Impact details are provided across multiple advisories. Remediation available: upgrade matio to a newer...

CVE-2021-36977

matio aka MAT File I/O Library 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MMmemcpy called from H5MMmalloc and H5Cloadentry, related to use of HDF5 1.12.0...