13420 matches found
CVE-2022-1534 Buffer Over-read at parse_rawml.c:1416 in bfabiszewski/libmobi
Buffer Over-read at parserawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash...
CVE-2022-1534
Buffer Over-read at parserawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash...
Buffer Over-read
Description Buffer Over-read in hpjansson/chafa at xwd-loader.c:185 Build export CFLAGS="-g -O0 -lpthread -fsanitize=address" export CXXFLAGS="-g -O0 -lpthread -fsanitize=address" export LDFLAGS="-fsanitize=address" ./autogen.sh ./configure --disable-shared make POC ./tools/chafa/chafa ./poc.png...
Buffer Over-read in function utfc_ptr2len
Description Buffer Over-read in function utfcptr2len at mbyte.c:2113 vim version git log commit 5a8fad32ea9c075f045b37d6c7739891d458f82b HEAD - master, tag: v8.2.4962, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /mnt/share/max/fuzz/poc/vim/poch8s.dat -c :qa!...
Important: python-pillow
Issue Overview: A flaw was found in python-pillow. The vulnerability occurs due to improper initialization of image paths, leading to a buffer over-read and improper initialization. This flaw allows an attacker to unauthorized memory access that causes memory access errors, incorrect results, or...
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : libsepol vulnerabilities (USN-5391-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5391-1 advisory. Nicolas Iooss discovered that libsepol incorrectly handled memory when handling policies. An attacker could possibly use this iss...
Buffer Over-read
Description Stack-based Buffer Overflow at index.c:991 Build git clone https://github.com/bfabiszewski/libmobi.git cd libmobi export CFLAGS="-g -O0 -lpthread -fsanitize=address" export CXXFLAGS="-g -O0 -lpthread -fsanitize=address" export LDFLAGS="-fsanitize=address" ./autogen.sh ./configure...
EulerOS 2.0 SP8 : python-pillow (EulerOS-SA-2022-1583)
According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. CVE-2022-22815 - pathgetbbox in path.c in Pillow befo...
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2022-1549)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : python-pillow (EulerOS-SA-2022-1549)
According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. CVE-2022-22815 - pathgetbbox in path.c in Pillow befor...
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2022-1583)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2022:1312-1 Security update for SDL
This update for SDL fixes the following issues: - CVE-2020-14409: Fixed an integer overflow and resultant SDLmemcpy heap corruption in SDLBlitCopy in video/SDLblitcopy.c. bsc1181202 - CVE-2020-14410: Fixed a heap-based buffer over-read in Blit3or4to3or4inversedrgb in video/SDLblitN.c. bsc1181201 ...
SUSE-SU-2022:14943-1 Security update for SDL
This update for SDL fixes the following issues: - CVE-2020-14410: Fixed a heap-based buffer over-read in Blit3or4to3or4inversedrgb in video/SDLblitN.c bsc1181201. - CVE-2019-7637: Fixed a heap-based buffer overflow in SDLFillRect in video/SDLsurface.c bsc1124825. - CVE-2021-33657: Fix a buffer...
SUSE SLED15 / SLES15 Security Update : SDL (SUSE-SU-2022:1273-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1273-1 advisory. - SDL Simple DirectMedia Layer through 2.0.12 has an Integer Overflow and resultant SDLmemcpy heap corruption ...
CVE-2022-29537
gprtpbuilderdohevc in ietf/rtppckmpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box...
CVE-2022-29537
gprtpbuilderdohevc in ietf/rtppckmpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box...
Heap overflow
gprtpbuilderdohevc in ietf/rtppckmpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box...
SUSE-SU-2022:1273-1 Security update for SDL
This update for SDL fixes the following issues: - CVE-2020-14409: Fixed an integer overflow and resultant SDLmemcpy heap corruption in SDLBlitCopy in video/SDLblitcopy.c. bsc1181202 - CVE-2020-14410: Fixed a heap-based buffer over-read in Blit3or4to3or4inversedrgb in video/SDLblitN.c. bsc1181201 ...
CVE-2022-29537
GPAC 2.0.0 contains a heap-based buffer over-read in gp_rtp_builder_do_hevc (ietf/rtp_pck_mpeg4.c); demonstrated by MP4Box. Debian advisory DSA-5411-1 fixes this issue for GPAC, upgrading to gpac 1.0.1+dfsg1-4+deb11u2 for Bullseye. Other connected sources reference GPAC-related CVEs, including CV...
