Heap overflow

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read2004sectionhandles ../../src/decode.c:2637...

CVE-2020-21840

A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bitsearchsentinel ../../src/bits.c:1985...

CVE-2020-21832

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read2004compressedsection ../../src/decode.c:2417...

CVE-2020-21838

A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read2004sectionappinfo ../../src/decode.c:2842...

CVE-2020-21840

A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bitsearchsentinel ../../src/bits.c:1985...

Heap overflow

A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read2004sectionclasses ../../src/decode.c:2440...

CVE-2020-21841

CVE-2020-21841 affects GNU LibreDWG 0.10. The vulnerability is a heap-based buffer overflow triggered by a flaw in bit_read_B in ../../src/bits.c:135. Multiple connected records (Red Hat, SUSE, CNVD, NVD, NVD-derived feeds, and others) confirm the same issue across sources, indicating a consisten...

CVE-2020-21840

A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bitsearchsentinel ../../src/bits.c:1985...

CVE-2020-21840

The connected records confirm a heap-based buffer overflow in GNU LibreDWG 0.10, exploitable via bit_search_sentinel in ../../src/bits.c:1985. Affected component: LibreDWG library (C, DWG reading/writing). Root cause: buffer overflow in heap handling. Impact as stated: Confidentiality/Integrity/A...

CVE-2020-21838

CVE-2020-21838 affects GNU LibreDWG 0.10 and is a heap-based buffer overflow triggered by read_2004_section_appinfo in ../../src/decode.c:2842. The vulnerability is documented across multiple sources (NVD, Red Hat, SUSE, CNVD/CNVD-like entries, OSV, etc.). Reported impact indicates potential part...

CVE-2020-21838

A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read2004sectionappinfo ../../src/decode.c:2842...

CVE-2020-21832

CVE-2020-21832 describes a heap-based buffer overflow in GNU LibreDWG 0.10, triggered by reading in the function read_2004_compressed_section (src/decode.c:2417). The vulnerability affects LibreDWG’s ability to safely process certain DWG inputs, with potential impacts on confidentiality, integrit...

CVE-2020-21818

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:48...

CVE-2020-21814

A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlwescape ../../programs/escape.c:97...

CVE-2020-21819

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641via htmlescape ../../programs/escape.c:51...

CVE-2020-21819

GNU LibreDWG 0.10.2641 contains a heap-based buffer overflow vulnerability exploitable via the code path in htmlescape ../../programs/escape.c:51. Affected component is the LibreDWG C library used for DWG file handling. Impact is described as heap corruption with potential high impact to confiden...

CVE-2020-21813

Summary: CVE-2020-21813 affects GNU LibreDWG, specifically version 0.10.2641, with a heap-based buffer overflow exploitable via the function path output_TEXT in dwg2SVG.c:114. What is affected: LibreDWG 0.10.2641 (GNU LibreDWG). Root cause (as stated): heap-based buffer overflow in output_TEXT at...

PTC OPC UA Server Multiple vulnerabilities

Binary data ptcopcuamultivulns.nbin...

Out-of-Bounds Read

gpac is vulnerable to out-of-bounds read. The vulnerability exists due to a heap-based buffer over-read...

SUSE-SU-2021:1613-1 Security update for lz4

This update for lz4 fixes the following issues: - CVE-2021-3520: Fixed memory corruption due to an integer overflow bug caused by memmove argument bsc1185438. - CVE-2019-17543: Fixed heap-based buffer overflow in LZ4write32 bsc1153936...