CVE-2020-27845: Out-of-bounds Read

There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability...

Google TensorFlow Buffer Overflow Vulnerability (CNVD-2021-00091)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from a buffer overflow vulnerability that stems from the DataFormatVecPermute API not validating the src format and dst format attributes. An attacker could exploit the...

PT-2020-5601

Name of the Vulnerable Software and Affected Versions openjpeg versions prior to 2.4.0 Description A flaw was found in openjpeg's src/lib/openjp2/t2.c, allowing an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from...

PT-2021-6542

Name of the Vulnerable Software and Affected Versions libsolv versions prior to 0.7.17 Description The issue is related to a buffer overflow vulnerability in the pool disabled solvable function in the src/repo.h component of the libsolv library. This vulnerability allows attackers to cause a Deni...

PT-2020-6626

Name of the Vulnerable Software and Affected Versions libsolv versions prior to 0.7.17 Description The issue is related to a buffer overflow vulnerability in the prune to recommended function in src/policy.c of the libsolv library. This vulnerability allows attackers to cause a Denial of Service...

PT-2020-6436

Name of the Vulnerable Software and Affected Versions libsolv affected versions not specified Description The issue is related to a buffer overflow vulnerability in the testcase read function of the src/testcase.c component in the Libsolv library. This vulnerability could allow a remote attacker ...

WS-2020-0306

OpenSC before 0.22.0-rc1 is vulnerable to stack-use-after-return in insertpin on src/libopensc/pkcs15-tcos.c...

WS-2020-0309

Fluent Bit before v1.7.2 is vulnerable to heap-buffer-overflow in flbsdscatutf8 on src/flbsds.c...

WS-2020-0307

Fluent Bit before v1.7.2 is vulnerable to heap-buffer-overflow in processchunkeddata on src/flbhttpclient.c...

CVE-2020-15710 Potential double-free in pulseaudio

Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in...

CVE-2020-15710

Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in...

CVE-2020-15710: Double Free

Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in...

WS-2020-0322

The crash method MatVarReadNextInfo5 in the file src/mat5.c that in the library matio has been fixed because of illegal memory access by addition of readstrict...

WS-2020-0356

fluent-bit in versions 1.1.0 to 1.6.10 is vulnerable to Heap-buffer-overflow in flbstrptime, related to src/flbstrptime.c...

Debian: Security Advisory (DLA-2422-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WS-2020-0418

In DOMPurify in versions 2.0.6 to 2.1.1 is vulnerable to xss in src/purify.js...

Debian DLA-2422-1 : qtsvg-opensource-src security update

Malformed SVG images were able to cause a segmentation fault in qtsvg-opensource-src, the QtSvg module for displaying the contents of SVG files in Qt. For Debian 9 stretch, this problem has been fixed in version 5.7.120161021-2.1. We recommend that you upgrade your qtsvg-opensource-src packages...

[SECURITY] [DLA 2422-1] qtsvg-opensource-src security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2422-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk October 31, 2020 https://wiki.debian.org/LTS -...

DLA-2422-1 qtsvg-opensource-src - security update

Bulletin has no description...

PT-2023-29792

Name of the Vulnerable Software and Affected Versions gifsicle version 1.94 Description A floating point exception FPE issue was discovered in gifsicle through the resize stream function at src/xform.c. This issue can cause problems when processing certain inputs. Recommendations For gifsicle...