PT-2023-17951 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a heap buffer overflow in the encode function of miscdata.cpp, which could lead to a possible out of bounds read. This might result in local information disclosure, requiring System executio...

CVE-2023-21224

CVE-2023-21224 affects the Android kernel, specifically the ss_ProcessReturnResultComponent function in ss_MmConManagement.c. The vulnerability is a heap-buffer-overflow–induced out-of-bounds read that could lead to remote information disclosure without extra privileges or user interaction. Publi...

Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2023-230)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-230 advisory. LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, th...

libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c

A vulnerability was found in libtiff. This vulnerability occurs due to an issue in processCropSelections in the tools/tiffcrop.c function in LibTIFF that has a heap-based buffer overflow for example, "WRITE of size 307203" via a crafted TIFF image...

Medium: qpdf

Issue Overview: QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file. CVE-2022-34503 Affected Packages: qpdf Note: This advisory is applicable to Amazon...

OSV-2023-510 Heap-buffer-overflow in uofs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60056 Crash type: Heap-buffer-overflow READ 1 Crash state: uofs pdfifindcffindex pdfireadcfffont...

OSV-2023-509 Heap-buffer-overflow in ndpi_search_thrift_tcp_udp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60070 Crash type: Heap-buffer-overflow WRITE Crash state: ndpisearchthrifttcpudp checkndpidetectionfunc ndpicheckflowfunc...

PT-2023-35882 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow write crash. The crash involves functions such as ndpi search thrift tcp udp, check ndpi detection func, a...

PT-2023-35884 · Uofs · Uofs

Name of the Vulnerable Software and Affected Versions: uofs affected versions not specified Description: The issue is related to a heap-buffer-overflow read, which occurs in the uofs component. Specifically, the crash happens in the pdfi find cff index and pdfi read cff font functions...

OSV-2023-508 Heap-buffer-overflow in AffixMgr::compound_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60034 Crash type: Heap-buffer-overflow READ 1 Crash state: AffixMgr::compoundcheck AffixMgr::compoundcheck AffixMgr::compoundcheck...

PT-2023-35880 · Git +1 · Ntopng

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the IEC104Stats::processPacket function,...

PT-2023-35881 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by an OSS-Fuzz report. The crash state involves repeated calls to the AffixMgr::compoun...

CVE-2023-36271

LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitwcs2nlen at bits.c...

CVE-2023-36273

LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bitcalcCRC at bits.c...

CVE-2023-36274

LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitwriteTF at bits.c...

CVE-2023-36273

LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bitcalcCRC at bits.c...

Heap overflow

LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bitwcs2nlen at bits.c...

CVE-2023-36192

Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capturewscheckpacket at /src/capture.c...

Heap overflow

Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguityerror component at /src/clp.c...

CVE-2023-36193

Gifsicle v1.9.3 is affected by a heap buffer overflow in the ambiguity_error path (src/clp.c). Multiple trusted sources (OSV entries and OpenSUSE advisories) confirm a fix was released in version 1.94 to address CVE-2023-36193; the SUSE/openSUSE advisory explicitly notes the fix for this vulnerab...