Lucene search
K

2309 matches found

OSV
OSV
added 2023/10/23 4:15 p.m.2 views

DEBIAN-CVE-2023-46332

WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop, which lead to segmentation fault...

5.5CVSS5.7AI score0.0027EPSS
Exploits1References1
OSV
OSV
added 2023/10/23 4:15 p.m.11 views

CVE-2023-46332

WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop, which lead to segmentation fault...

5.5CVSS7.1AI score
Exploits0References1
Prion
Prion
added 2023/10/23 4:15 p.m.14 views

Input validation

WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop, which lead to segmentation fault...

1.9CVSS5.4AI score0.0027EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/23 12:0 a.m.12 views

CVE-2023-46332

WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop, which lead to segmentation fault...

6.8AI score0.0027EPSS
Exploits1References1
CVE
CVE
added 2023/10/23 12:0 a.m.91 views

CVE-2023-46332

CVE-2023-46332 pertains to WebAssembly wabt 1.0.33, with an Out-of-Bound Memory Write in DataSegment::Drop() that leads to a segmentation fault. Affected component is wabt’s WebAssembly tooling; root cause is a memory handling bug in DataSegment::Drop(). Public details across connected docs menti...

5.5CVSS5.4AI score0.0027EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2023/10/23 12:0 a.m.17 views

CVE-2023-46332

WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop, which lead to segmentation fault...

5.7AI score0.0027EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2023/10/23 12:0 a.m.23 views

CVE-2023-46332

WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop, which lead to segmentation fault...

5.5CVSS5.4AI score0.0027EPSS
Exploits1
NVD
NVD
added 2023/10/21 12:15 a.m.11 views

CVE-2023-45681

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buffer in startdecoder. The root cause is a potential integer overflow in sizeofchar f-commentlistlength which may make setupmalloc allocate less memory...

7.8CVSS8.7AI score0.00518EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2023/10/21 12:15 a.m.12 views

CVE-2023-45681

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buffer in startdecoder. The root cause is a potential integer overflow in sizeofchar f-commentlistlength which may make setupmalloc allocate less memory...

7.8CVSS7.2AI score0.00518EPSS
Exploits0References5
Prion
Prion
added 2023/10/21 12:15 a.m.11 views

Integer overflow

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buffer in startdecoder. The root cause is a potential integer overflow in sizeofchar f-commentlistlength which may make setupmalloc allocate less memory...

4.4CVSS8AI score0.00518EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2023/10/21 12:0 a.m.5 views

stb_vorbis Input Validation Error Vulnerability

stbvorbis is an open source audio decoder for decoding ogg vorbis files. A security vulnerability exists in stbvorbis, which stems from a well-designed file that may trigger a memory write to the heap buffer allocated in "startdecoder"...

7.8CVSS7AI score0.00518EPSS
Exploits0References3
CVE
CVE
added 2023/10/20 11:26 p.m.53 views

CVE-2023-45681

CVE-2023-45681 affects the stb_vorbis library used by stb_vorbis (single-file MIT licensed) for OGG Vorbis processing. A crafted file may trigger a memory write past an allocated heap buffer in start_decoder due to an integer overflow in sizeof(char*) * (f->comment_list_length), causing under-...

7.8CVSS7.7AI score0.00518EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2023/10/20 11:26 p.m.4 views

CVE-2023-45681 Out of bounds heap buffer write in stb_vorbis

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buffer in startdecoder. The root cause is a potential integer overflow in sizeofchar f-commentlistlength which may make setupmalloc allocate less memory...

7.3CVSS7.8AI score0.00518EPSS
Exploits0References7
Cvelist
Cvelist
added 2023/10/20 11:26 p.m.18 views

CVE-2023-45681 Out of bounds heap buffer write in stb_vorbis

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buffer in startdecoder. The root cause is a potential integer overflow in sizeofchar f-commentlistlength which may make setupmalloc allocate less memory...

7.3CVSS9.2AI score0.00518EPSS
Exploits0References5
AlpineLinux
AlpineLinux
added 2023/10/20 11:26 p.m.14 views

CVE-2023-45681

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buffer in startdecoder. The root cause is a potential integer overflow in sizeofchar f-commentlistlength which may make setupmalloc allocate less memory...

7.8CVSS8.1AI score0.00518EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2023/10/20 11:26 p.m.30 views

CVE-2023-45681

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buffer in startdecoder. The root cause is a potential integer overflow in sizeofchar f-commentlistlength which may make setupmalloc allocate less memory...

7.8CVSS7.9AI score0.00518EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/10/20 12:0 a.m.20 views

Amazon Linux 2 : thunderbird (ALAS-2023-2291)

The version of thunderbird installed on the remote host is prior to 102.15.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2291 advisory. Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds...

8.8CVSS8AI score0.99739EPSS
Exploits9References4
Tenable Nessus
Tenable Nessus
added 2023/10/20 12:0 a.m.34 views

Amazon Linux 2 : libwebp12 (ALAS-2023-2290)

The version of libwebp12 installed on the remote host is prior to 1.2.0-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2290 advisory. Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memor...

8.8CVSS8AI score0.99739EPSS
Exploits9References4
Amazon
Amazon
added 2023/10/19 12:0 a.m.43 views

Important: libwebp12

Issue Overview: Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Critical CVE-2023-4863 Affected Packages: libwebp12 Note: This advisory is applicable to...

8.8CVSS8AI score0.99739EPSS
Exploits9
RedhatCVE
RedhatCVE
added 2023/10/18 12:59 a.m.48 views

CVE-2023-45863

An out-of-bounds memory write flaw was found in the load/unload module in the Linux kernel's kobject functionality, potentially triggering a race condition in the kobjectgetpath function. This issue may allow a local user to crash the system or potentially escalate their privileges on the system...

6.4CVSS7AI score0.00284EPSS
Exploits0References3
Rows per page
Query Builder