CVE-2021-29390

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c...

CVE-2021-29390

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c...

CVE-2023-38668

CVE-2023-38668 affects NASM up to version 2.16, with a stack-based buffer over-read in the disassembly path (disasm) that can crash the process and cause a denial of service. Documented characteristics from connected sources indicate a local attack surface with low exploit complexity; no patch/re...

CVE-2023-38667

CVE-2023-38667 : The NASM NASM disassembly component has a stack-based buffer over-read in the disasm path affecting NASM version 2.16 (including 2.16 RCs), enabling denial of service when processing crafted input. Multiple vendors/distributions (Red Hat, OSV, NVD mirrors) corroborate the issue; ...

CVE-2021-29390

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c...

CVE-2022-48554

CVE-2022-48554 affects the file utility (the Open Source project named “File”) with a stack-based buffer over-read in file_copystr() in funcs.c, before version 5.43. The issue can cause denial of service or potentially memory corruption. Affected distributions/contexts include Apple platforms (ma...

CVE-2021-29390

CVE-2021-29390 affects libjpeg-turbo 2.0.90, with a heap-based over-read (2 bytes) in decompress_smooth_data (jdcoefct.c). The MiracleLinux AXSA advisory confirms the issue and maps it to the same CVE; no exploit or in-wild details are provided in the connected documents. Remediation/fix version ...

PT-2023-26540 · Nasm +1 · Nasm +1

Name of the Vulnerable Software and Affected Versions: nasm version 2.16 Description: A stack-based buffer over-read issue in the disasm function allows attackers to cause a denial of service. Recommendations: For nasm version 2.16, at the moment, there is no information about a newer version tha...

PT-2023-26541 · Nasm +1 · Nasm +1

Name of the Vulnerable Software and Affected Versions: nasm version 2.16 Description: The issue is a stack-based buffer over-read in the disasm component, which allows attackers to cause a denial of service, resulting in a crash. Recommendations: For nasm version 2.16, at the moment, there is no...

CVE-2023-38667

Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service...

CVE-2023-38668

Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service crash...

CVE-2023-21625

Information disclosure in Network Services due to buffer over-read while the device receives DNS response...

Information disclosure

Information disclosure in Network Services due to buffer over-read while the device receives DNS response...

CVE-2023-28555 Buffer Over-read in Audio

Transient DOS in Audio while remapping channel buffer in media codec decoding...

CVE-2023-28555 Buffer Over-read in Audio

Transient DOS in Audio while remapping channel buffer in media codec decoding...

CVE-2023-21625

CVE-2023-21625 describes an information disclosure due to a buffer over-read during DNS response processing in Network Services, attributed to Qualcomm-based devices. The CVE is documented with high impact in CVSS metrics (confidentiality impact HIGH; network attack; no user interaction needed). ...

SUSE SLES12: libQt5Bootstrap-devel-static / libQt5Concurrent-devel / etc (SUSE-SU-2023:2971-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2971-1 advisory. - CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS bsc1209616. - CVE-2023-33285: Fixed buffer overflow in QDnsLookup bsc1211642....

PT-2023-4339 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: The issue is related to a buffer data out-of-bounds read in Foxit PDF Reader and Foxit PDF Editor. It allows remote attackers to...

EulerOS Virtualization 3.0.6.6 : vim (EulerOS-SA-2023-2442)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. CVE-2022-1725 - Buffer Over-read in GitHub repository vim/v...

The vulnerability of the function `ksmbd_smb2_check_message()` in the file system KSMBD’s `fs/smb/server/smb2misc.c` file allows a attacker to access protected information or cause service failures.

The vulnerability of the ksmbdsmb2checkmessage function in the fs/smb/server/smb2misc.c file of the KSMBD file system in the Linux operating system is related to reading data beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to access protected information or cause...