Double Free

Overview Affected versions of this package are vulnerable to Double Free during options.kexalgorithms handling. The double free can be triggered by an unauthenticated attacker in the default configuration. Remediation A fix was pushed into the master branch but not yet published. References -...

Double Free

Overview Affected versions of this package are vulnerable to Double Free in the split function in contrib/shpsort.c. This could allow information exposure or code execution via manipulation of malloc. Remediation Upgrade shapelib to version 1.6.0 or higher. References - GitHub Commit - GitHub Iss...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the TTFRenderTextSolid. This vulnerability is triggered by a crafted TTF file. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Commit - GitHub Issue...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write. A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::getdjvufile via crafted djvu file may lead to application crash and other consequences. Remediation A fix was pushed...