SUSE SLES12 Security Update : libwebp (SUSE-SU-2021:1830-1)

This update for libwebp fixes the following issues : CVE-2018-25010: Fixed heap-based buffer overflow in ApplyFilter bsc1185685. CVE-2020-36330: Fixed heap-based buffer overflow in ChunkVerifyAndAssign bsc1185691. CVE-2020-36332: Fixed extreme memory allocation when reading a file bsc1185674...

PT-2021-19366 · Opentext · Opentext Brava! Desktop

Name of the Vulnerable Software and Affected Versions: OpenText Brava! Desktop version 16.6.3.84 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

OpenText Brava! Desktop DWF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

OpenText Brava! Desktop DWF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2020-22035

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in getblockrow at libavfilter/vfbm3d.c, which might lead to memory corruption and other potential consequences...

CVE-2020-22036

CVE-2020-22036 is a heap-based Buffer Overflow in FFmpeg 4.2, specifically in filter_intra (libavfilter/vf_bwdif.c), which may cause memory corruption. Connected advisories confirm FFmpeg 4.2 is affected and describe multiple related CVEs; Debian and Ubuntu advisories list FFmpeg as the vulnerabl...

CVE-2020-22035

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in getblockrow at libavfilter/vfbm3d.c, which might lead to memory corruption and other potential consequences...

Ubuntu 18.04 LTS / 20.04 LTS : libwebp vulnerabilities (USN-4971-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4971-1 advisory. It was discovered that libwebp incorrectly handled certain malformed images. If a user or automated system were tricked into opening a...

in mcfriend99/bird

✍️ Description Heap-based 1-byte write violation. Certain programs can cause the parser/syntax-checker to write out of bounds. The below program writes a single byte out of bounds. 🕵️‍♂️ Proof of Concept Program: var a = 'outer' def test var a = 'inner' echo 'It works! $a' echo a echo test test def...

Heap-based Buffer Overflow in mcfriend99/bird

✍️ Description Heap-based Write Violation. Certain input programs can result in write access violations by the syntax checker component of the interpreter. One such program writes 23 bytes onto the heap outside of bounds and may result in arbitrary code execution and memory leaks. 🕵️‍♂️ Proof of...

CVE-2020-22033

A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vfvmafmotion.c in convolutiony8bit, which could let a remote malicious user cause a Denial of Service...

CVE-2020-22033

A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vfvmafmotion.c in convolutiony8bit, which could let a remote malicious user cause a Denial of Service...

CVE-2020-22023

A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filterframe at libavfilter/vfbitplanenoise.c, which might lead to memory corruption and other potential consequences...

CVE-2020-22034

A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vffloodfill.c, which might lead to memory corruption and other potential consequences...

CVE-2020-22017

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at fffillrectangle in libavfilter/drawutils.c, which might lead to memory corruption and other potential consequences...

UBUNTU-CVE-2020-22031

A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vfw3fdif.c in filter16complexlow, which might lead to memory corruption and other potential consequences...

CVE-2020-22031

A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vfw3fdif.c in filter16complexlow, which might lead to memory corruption and other potential consequences...

CVE-2020-22023

A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filterframe at libavfilter/vfbitplanenoise.c, which might lead to memory corruption and other potential consequences...

CVE-2020-22025

A heap-based Buffer Overflow vulnerability exists in gaussianblur at libavfilter/vfedgedetect.c, which might lead to memory corruption and other potential consequences...

CVE-2020-22025

CVE-2020-22025 is a heap-based buffer overflow in FFmpeg’s gaussian_blur implementation (libavfilter/vf_edgedetect.c) that can lead to memory corruption. Public advisories describe FFmpeg components affected (e.g., libavfilter, libavcodec) and advise upgrading FFmpeg to fixed versions. Debian DSA...