980 matches found
OSV-2023-178 Segv on unknown address in mrb_bint_sub
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57037 Crash type: Segv on unknown address Crash state: mrbbintsub intsub mrbvmexec...
Improper Input Validation
binutils is vulnerable to Improper Input Validation. The vulnerability exists though the concatfilename function of objdump SEGV, allowing an attacker to exploit this flaw by submitting a maliciously crafted input...
OSV-2023-102 Segv on unknown address in ndpi_free_flow_data
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56272 Crash type: Segv on unknown address Crash state: ndpifreeflowdata ndpifreeflow fuzzprocesspacket.c...
Denial Of Service (DoS)
libtiff.so is vulnerable to Denial Of Service DoS. The vulnerability exist due to the SEGV errors in the extractContigSamplesShifted24bits of tiffcrop.c, allowing an attacker to cause an application crash through a maliciously crafted tiff file...
Denial Of Service (DoS)
libtiff.so is vulnerable to Denial Of Service DoS. The vulnerability exist due to the SEGV errors in extractContigSamplesShifted8bits of tiffcrop.c, allowing an attacker to cause an application crash through a maliciously crafted tiff file...
CVE-2023-22605
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2023-22603
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
ELF header parsing library doesn't check for valid offset
The crate has several unsafe sections that don't perform proper pointer validation. An example can be found in the following function: fn sectionheaderraw&self - &ET::SectionHeader let shoff = self.elfheader.sectionheaderoffset as usize; let shnum = self.elfheader.sectionheaderentrynum as usize;...
GHSA-G6PW-999W-J75M ELF header parsing library doesn't check for valid offset
The crate has several unsafe sections that don't perform proper pointer validation. An example can be found in the following function: fn sectionheaderraw&self - &ET::SectionHeader let shoff = self.elfheader.sectionheaderoffset as usize; let shnum = self.elfheader.sectionheaderentrynum as usize;...
RHEL 9 : fribidi (RHSA-2022:8011)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:8011 advisory. FriBidi is a library to handle bidirectional scripts for example Hebrew, Arabic, so that the display is done in the proper way, while the te...
RLSA-2022:8011 Moderate: fribidi security update
FriBidi is a library to handle bidirectional scripts for example Hebrew, Arabic, so that the display is done in the proper way, while the text data itself is always written in logical order. Security Fixes: fribidi: Stack based buffer overflow CVE-2022-25308 fribidi: Heap-buffer-overflow in...
fribidi security update
An update is available for fribidi. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FriBidi is a library to handle bidirectional scripts for example Hebrew,...
RLSA-2022:7514 Moderate: fribidi security update
FriBidi is a library to handle bidirectional scripts for example Hebrew, Arabic, so that the display is done in the proper way, while the text data itself is always written in logical order. Security Fixes: fribidi: Stack based buffer overflow CVE-2022-25308 fribidi: Heap-buffer-overflow in...
ALSA-2022:7514 Moderate: fribidi security update
FriBidi is a library to handle bidirectional scripts for example Hebrew, Arabic, so that the display is done in the proper way, while the text data itself is always written in logical order. Security Fixes: fribidi: Stack based buffer overflow CVE-2022-25308 fribidi: Heap-buffer-overflow in...
OSV-2022-1002 Segv on unknown address in upb_MiniTable_SetSubEnum
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51950 Crash type: Segv on unknown address Crash state: upbMiniTableSetSubEnum upbMessageDefLinkMiniTable upbFileDefCreate...
PT-2022-36655 · Git +1 · Upb
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash involves the functions upb MiniTable SetSubEnum, upb MessageDef...
CVE-2022-38936
An issue has been found in PBC through 2022-8-27. A SEGV issue detected in the function pbcwmessageinteger in src/wmessage.c:137...
Design/Logic Flaw
An issue has been found in PBC through 2022-8-27. A SEGV issue detected in the function pbcwmessageinteger in src/wmessage.c:137...
