1040 matches found
CVE-2022-31173
Juniper is a GraphQL server library for Rust. Affected versions of Juniper are vulnerable to uncontrolled recursion resulting in a program crash. This issue has been addressed in version 0.15.10. Users are advised to upgrade. Users unable to upgrade should limit the recursion depth manually...
CVE-2022-31173: Uncontrolled Resource Consumption
Juniper is a GraphQL server library for Rust. Affected versions of Juniper are vulnerable to uncontrolled recursion resulting in a program crash. This issue has been addressed in version 0.15.10. Users are advised to upgrade. Users unable to upgrade should limit the recursion depth manually...
Binary Vulnerability in CAD Mini Viewing at Shanghai Xiaosai Technology Co.
CAD Mini Viewer is a DWG viewing tool to quickly view DWG drawings out of AutoCAD. A binary vulnerability exists in CAD Mini Viewer, which can be exploited by attackers to cause the program to crash...
Mozilla Firefox Resource Management Error Vulnerability (CNVD-2023-06510)
Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable to a resource management error, which is caused by a confusion in the program's instructions for freeing memory. An attacker could exploit the vulnerability to cause the program to crash,...
Mozilla Firefox 资源管理错误漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable to a resource management error, which is caused by a confusion in the program's instructions for freeing memory. An attacker could exploit the vulnerability to cause the program to crash,...
Updated gimp packages fix security vulnerability
GIMP 2.10 is vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash. CVE-2022-30067...
Vim 资源管理错误漏洞
Vim is a cross-platform text editor, and a memory mis-reference vulnerability exists in versions prior to Vim 8.2. The vulnerability stems from a mix-up in the program's instructions for freeing memory. An attacker could exploit this vulnerability to potentially crash the program, execute arbitra...
Google Chrome Shared Component Memory Misreference Vulnerability
Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions of Google Chrome prior to 102.0.5005.61, which stems from a confusion in the shared component where the program is responsible for freeing memory instructions. An attacker could...
Google Chrome User Education Component Memory Misreference Vulnerability
Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the User Education component of Google Chrome versions prior to 102.0.5005.61, which stems from a confusion in the instructions responsible for freeing memory in the User Education...
Google Chrome UI Foundations Component Memory Misreference Vulnerability
Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions of Google Chrome prior to 102.0.5005.61, which stems from a confusion in the UI Foundations component regarding the instruction the program is responsible for freeing memory. An...
PT-2022-6888 · Libtiff +8 · Libtiff +8
Name of the Vulnerable Software and Affected Versions: libtiff version 4.4.0rc1 Description: The issue is related to an invalid pointer free operation in the TIFFClose function at tif close.c:131, called by tiffcrop.c:2522. This can cause a program crash and denial of service when processing...
PT-2022-6895 · Libtiff +8 · Libtiff +8
Name of the Vulnerable Software and Affected Versions: libtiff version 4.4.0rc1 Description: A flaw in the rotateImage function in the tiffcrop.c file at line 8621 can cause a program crash when reading a crafted input due to a sysmalloc assertion failure. This issue is related to an incorrect...
CVE-2022-28948
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
CVE-2022-28948
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
Input validation
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
CVE-2022-28948
CVE-2022-28948 affects Go-Yaml v3 Unmarshal; a crash can occur when deserializing invalid input. Connected sources corroborate a Go-Yaml Unmarshal issue across advisories (e.g., Astra Linux, Debian, GHSA), with no explicit patch version in the provided documents. Exploitation status is not stated...
CVE-2022-28948
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
CVE-2022-28948
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
