CVE-2021-39530

An issue was discovered in libredwg through v0.10.1.3751. bitwcs2nlen in bits.c has a heap-based buffer overflow...

CVE-2021-39518

An issue was discovered in libjpeg through 2020021. LineBuffer::FetchRegion in linebuffer.cpp has a heap-based buffer overflow...

CVE-2021-39522

CVE-2021-39522 affects the LibreDWG library (libredwg) up to version 0.10.1.3751. The root cause is a heap-based buffer overflow in bit_wcs2len() located in bits.c. This vulnerability can potentially corrupt heap memory when processing certain inputs, as described in multiple sources (e.g., CNVD-...

CVE-2021-39537

CVE-2021-39537 affects ncurses: _nc_captoinfo in captoinfo.c has a heap-based buffer overflow when processing terminfo data, observed in ncurses up to v6.2-1. Connected advisories confirm this is a real issue and provide mitigations/patch paths: Debian DLA-3682-1 and related Debian notes, Cloud F...

CVE-2021-39537

An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow...

CVE-2020-21547

Libsixel 1.8.2 contains a heap-based buffer overflow in the ditherfuncfs function in tosixel.c...

CVE-2020-21547

CVE-2020-21547 affects Libsixel 1.8.2, with a heap-based buffer overflow in the dither_func_fs function (tosixel.c). Multiple connected sources corroborate the flaw and link it to Libsixel 1.8.2, describing the vulnerability as a heap overflow in that code path. APTs suggest a remediation path: v...

CVE-2020-21547

Libsixel 1.8.2 contains a heap-based buffer overflow in the ditherfuncfs function in tosixel.c...

CVE-2021-38404 Delta Electronics DOPSoft 2 Heap-based Buffer Overflow

Delta Electronic DOPSoft 2 Version 2.00.07 and prior lacks proper validation of user-supplied data when parsing specific project files. This could result in a heap-based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process...

Amazon Linux 2 : gcc10-binutils (ALAS-2021-1702)

The version of gcc10-binutils installed on the remote host is prior to 2.35-21. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1702 advisory. 2024-01-19: CVE-2021-20284 was added to this advisory. An issue was discovered in the Binary File Descriptor BFD...

CVE-2021-3778

A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-3778

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3778

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3778 Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3778

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3778

vim is vulnerable to Heap-based Buffer Overflow...

Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2021-2403)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-3778

CVE-2021-3778 is a heap-based buffer overflow in Vim. Public feeds attribute the issue to heap-based corruption caused by invalid UTF-8 handling in Vim’s code paths (examples include utf_ptr2char() in mbyte.c per ALAS2-2021-1728, and references in Debian’s security tracker). The connected documen...

EulerOS 2.0 SP2 : libwebp (EulerOS-SA-2021-2403)

According to the versions of the libwebp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this...

KLA12283 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A uncontrolled search path element...