CVE-2024-34251

An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a denial of service via the "blocktypegetarity" function in core/iwasm/interpreter/wasm.h...

CVE-2024-34246

The wasm3 WebAssembly interpreter (version v0.5.0 ) contains an out-of-bound memory read vulnerability. This issue originates in the main function located within the wasm3/platforms/app/main.c file, which can lead to a segmentation fault . To mitigate the risk until a patch is available, it is re...

CVE-2024-34251

An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a denial of service via the "blocktypegetarity" function in core/iwasm/interpreter/wasm.h...

CVE-2024-34246

wasm3 v0.5.0 was discovered to contain an out-of-bound memory read which leads to segmentation fault via the function "main" in wasm3/platforms/app/main.c...

CVE-2024-34251

An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a denial of service via the "blocktypegetarity" function in core/iwasm/interpreter/wasm.h...

CVE-2024-34251

The Bytecode Alliance wasm-micro-runtime (WAMR) version v2.0.0 is affected by an out-of-bound memory read vulnerability. The issue resides in the block_type_get_arity function located in core/iwasm/interpreter/wasm.h (and wasm_loader.c). A remote attacker can exploit this memory handling flaw to ...

CVE-2024-34246

wasm3 v0.5.0 was discovered to contain an out-of-bound memory read which leads to segmentation fault via the function "main" in wasm3/platforms/app/main.c...

CVE-2024-34246

wasm3 v0.5.0 was discovered to contain an out-of-bound memory read which leads to segmentation fault via the function "main" in wasm3/platforms/app/main.c...

CVE-2024-34251

An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a denial of service via the "blocktypegetarity" function in core/iwasm/interpreter/wasm.h...

Oracle Linux 9 : libX11 (ELSA-2024-2145)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2145 advisory. - Fix CVE-2023-43785: out-of-bounds memory access in XkbReadKeySyms - Fix CVE-2023-43786: stack exhaustion from infinite recursion in PutSubImage Tenab...

Oracle Linux 9 : libXpm (ELSA-2024-2146)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2146 advisory. - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage - CVE-2023-43787 libX11: integer overflow in XCreateImage leading to a...

VulnCheck KEV: CVE-2017-0068

Browsers in Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Edge Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0009, CVE-2017-0011, CVE-2017-0017, and...

edk2:TestCapsulePei: Heap-buffer-overflow in BuildCapsuleDescriptors

Project: https://github.com/tianocore/edk2.git Detailed Report: https://oss-fuzz.com/testcase?key=6226151797227520 Project: edk2 Fuzzing Engine: libFuzzer Fuzz Target: TestCapsulePei Job Type: libfuzzerasanedk2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x7e8ae71ff8...

CVE-2023-42072

PDF-XChange Editor JPC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

ghostscript:gs_device_tiffsep1_fuzzer: Crash in mem_planar_put_image_slow

Detailed Report: https://oss-fuzz.com/testcase?key=4915684629872640 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x532000031790 Crash State: memplanarputimageslow...

Advisory ROSA-SA-2024-2412

software: libxpm 3.5.17 OS: ROSA-CHROME packageevrstring: libxpm-3.5.17-1 CVE-ID: CVE-2023-43788 BDU-ID: 2023-06887 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the XpmCreateXpmImageFromBuffer function of the X Pixmap Image File XPM libXpm library is related to reading data beyond buffer...

FreeRDP Image Copy Data Compromise

The vulnerability of the freerdpimagecopy function in the RDP client FreeRDP is related to reading data beyond the memory boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

freerdp: integer-Underflow leading to Out-Of-Bound Read in zgfx_decompress_segment

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Integer-Underflow leading to Out-Of-Bound Read in the zgfxdecompresssegment function. In the context of CopyMemory, it's possible to read data beyond the...

libXpm: out of bounds read on XPM with corrupted colormap

A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and read contents of memory on the system...

libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system...