CVE-2022-24788: Buffer Copy without Checking Size of Input

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Versions of vyper prior to 0.3.2 suffer from a potential buffer overrun. Importing a function from a JSON interface which returns bytes generates bytecode which does not clamp bytes length, potentially resulting in a...

PJSIP Heap Buffer Overflow DoS

The vulnerability of the PJSIP multimedia communication library is related to the issue of the operation exceeding the buffer boundaries in memory during SIP message processing. Exploiting this vulnerability could allow a malicious actor to cause service failures...

FreeBSD : Ruby -- Buffer overrun in String-to-Float conversion (06ed6a49-bad4-11ec-9cfe-0800270512f4)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 06ed6a49-bad4-11ec-9cfe-0800270512f4 advisory. - piao reports: Due to a bug in an internal function that converts a String to a Float, some convertion...

Buffer overrun in String-to-Float conversion

A buffer-overrun vulnerability is discovered in a conversion algorithm from a String to a Float. This vulnerability has been assigned the CVE identifier CVE-2022-28739. We strongly recommend upgrading Ruby. Due to a bug in an internal function that converts a String to a Float, some convertion...

Ruby -- Buffer overrun in String-to-Float conversion

piao reports: Due to a bug in an internal function that converts a String to a Float, some convertion methods like KernelFloat and Stringtof could cause buffer over-read. A typical consequence is a process termination due to segmentation fault, but in a limited circumstances, it may be exploitabl...

PT-2022-19134 · Bentley · Microstation Connect

Name of the Vulnerable Software and Affected Versions: Bentley MicroStation CONNECT version 10.16.02.34 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicio...

Libde265 Heap Buffer Overflow DoS

The vulnerability of the putqpelfallback function in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created file...

GDAL NetCDF Confidential Data Access

The vulnerability of the netCDF component of the GDAL transformation library for geospatial data is related to writing beyond buffer boundaries. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...

Libde265 Heap Buffer Overflow DoS

The vulnerability of the de265image::availablezscan function in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created file...

LibTIFF invertImage() Buffer Overflow DoS

The vulnerability of the invertImage function in the tiffcrop component of the LibTIFF library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure...

Dxflib Function HandleLWPolylineData Confidential Data Compromise

The vulnerability of the function DLDxf::handleLWPolylineData in the DXF file parsing library Dxflib is related to writing outside the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures usin...

Libde265 put_weighted_pred_avg_16_fallback DoS

The vulnerability of the putweightedpredavg16fallback function in the h.265 Libde265 implementation is related to writing outside the buffer boundaries. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created file...

ODF Code Component Heap Buffer Overflow DoS

The vulnerability of the ODReadUTF8String function in the odfcode.c component of the multimedia platform GPAC is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created media file...

SIXEL Libsixel Encoder/Decoder Heap Buffer Overflow DoS

The vulnerability of the ditherfuncfs function in the tosixel.c component of the SIXEL Libsixel encoder/decoder implementation is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...

Libde265 Heap Buffer Overflow DoS

The vulnerability of the putqpel00fallback16 function in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

Libde265 Heap Buffer Overflow DoS

The vulnerability of the applysaointernal function in the h.265 Libde265 implementation is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created file...

Libde265 Heap Buffer Overflow DoS

The vulnerability of the mcluma function in the h.265 Libde265 video codec implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

RawSpeed TableLookUp setTable Confidential Data Access Data Compromise

The vulnerability of the TableLookUp::setTable function in the RawSpeed library of the Darktable application relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

GPAC multimedia platform gf_fprintf Heap Buffer Overflow DoS

The vulnerability of the gffprintf function in the osfile.c component of the GPAC multimedia platform is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

genpstrx_text Component DoS

The vulnerability of the genpstrxtext component of the .fig Fig2dev file conversion utility is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure by converting an xfig file into a pstricks format...