256 matches found
CVE-2020-36150
CVE-2020-36150 affects libmysofa 0.5–1.1, caused by incorrect input handling in the loudness function, leading to a heap buffer overflow and access to unallocated memory. Connected advisories confirm this CVE alongside multiple related fixes; openSUSE/SUSE advisories update libmysofa to 0.9.1 to ...
CVE-2020-36151
Incorrect handling of input data in mysofaresamplerresetmem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block...
CVE-2020-36148
Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions e.g. in embedded environment...
CVE-2020-36148
Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions e.g. in embedded environment...
CVE-2020-36148
CVE-2020-36148 affects the libmysofa library (versions 0.5–1.1). The issue is an incorrect handling of input data in verifyAttribute, which can cause a NULL pointer dereference and segmentation fault under restricted memory protection, or a near-NULL overwrite when memory is unrestricted (e.g., e...
PT-2021-11932 · Libmysofa +1 · Libmysofa +1
Name of the Vulnerable Software and Affected Versions: libmysofa library versions 0.5 through 1.1 Description: The issue arises from incorrect handling of input data in the loudness function within the libmysofa library, leading to a heap buffer overflow and access to an unallocated memory block...
PT-2021-11930 · Libmysofa +1 · Libmysofa +1
Name of the Vulnerable Software and Affected Versions: libmysofa versions 0.5 through 1.1 Description: The issue arises from incorrect handling of input data in the verifyAttribute function, which can lead to a NULL pointer dereference and result in a segmentation fault error when there are...
PT-2021-11931 · Libmysofa +1 · Libmysofa +1
Name of the Vulnerable Software and Affected Versions: libmysofa versions 0.5 through 1.1 Description: The issue arises from incorrect handling of input data in the changeAttribute function, which can lead to a NULL pointer dereference and result in a segmentation fault error when restrictive...
PT-2021-11933 · Libmysofa +1 · Libmysofa +1
Name of the Vulnerable Software and Affected Versions: libmysofa versions 0.5 through 1.1 Description: The issue arises from incorrect handling of input data in the mysofa resampler reset mem function, leading to a heap buffer overflow and the potential overwriting of a large memory block...
libmysofa 代码问题漏洞
libmysofa is a lightweight C library for reading AES SOFA files. A null pointer dereference vulnerability exists in libmysofa 0.5 - 1.1. The vulnerability stems from the verifyAttribute function failing to properly handle input data. An attacker can exploit the vulnerability to cause segmentation...
libmysofa 缓冲区错误漏洞
libmysofa is a lightweight C library for reading AES SOFA files. A heap buffer overflow vulnerability exists in libmysofa 0.5 - 1.1. The vulnerability stems from a failure of the loudness function to handle input data correctly. An attacker can exploit this vulnerability to cause a heap buffer...
libmysofa 缓冲区错误漏洞
libmysofa is a lightweight C library for reading AES SOFA files. A buffer overflow vulnerability exists in readDataVar in hdf/dataobject.c in libmysofa 0.5 - 1.1. An attacker can exploit this vulnerability to execute arbitrary code via a specially crafted SOFA...
libmysofa 代码问题漏洞
libmysofa is a lightweight C library for reading AES SOFA files. A null pointer dereference vulnerability exists in libmysofa 0.5 - 1.1. The vulnerability stems from the changeAttribute function failing to handle input data correctly. An attacker can exploit the vulnerability to cause segmentatio...
libmysofa 缓冲区错误漏洞
libmysofa is a lightweight C library for reading AES SOFA files. A heap buffer overflow vulnerability exists in libmysofa 0.5 - 1.1. The vulnerability stems from the mysofaresamplerresetmem function failing to handle input data correctly. An attacker can exploit this vulnerability to cause a heap...
Ubuntu: Security Advisory (USN-4473-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4473-1: libmysofa vulnerabilities
It was discovered that libmysofa incorrectly handled certain input files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact. CVE-2019-16091, CVE-2019-16092, CVE-2019-16093, CVE-2019-16094, CVE-2019-16095...
USN-4473-1 libmysofa vulnerabilities
It was discovered that libmysofa incorrectly handled certain input files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact. CVE-2019-16091, CVE-2019-16092, CVE-2019-16093, CVE-2019-16094, CVE-2019-16095...
PT-2021-11934 · Symonics +2 · Libmysofa +2
Name of the Vulnerable Software and Affected Versions: Symonics libmysofa versions 0.5 through 1.1 Description: The issue allows attackers to execute arbitrary code via a crafted SOFA file, due to a buffer overflow in the readDataVar function in hdf/dataobject.c. Recommendations: For versions 0.5...
The vulnerability of the treeRead component in the libmysofa library allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the treeRead component in the libmysofa library exists due to insufficient checking of multiplication and addition operations. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
