1548 matches found
GLSA-202401-32 : libaom: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202401-32 libaom: Multiple Vulnerabilities - AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aomimage.c. CVE-2020-36129 - AOM v2.0.1 was discovered to contain a NULL pointer dereference via the...
Moderate: Red Hat Security Advisory: freetype security update
An update for freetype is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
RHEL 8 : freetype (RHSA-2024:0420)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0420 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual...
GHSA-PVCR-V8J8-J5Q3 Parsing JSON serialized payload without protected field can lead to segfault
Summary Calling jws.Parse with a JSON serialized payload where the signature field is present while protected is absent can lead to a nil pointer dereference. Details This seems to also affect other functions that calls Parse internally, like jws.Verify. My understanding of these functions from t...
[SECURITY] [DLA 3700-1] cjson security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3700-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz December 30, 2023 https://wiki.debian.org/LTS -...
CVE-2023-50472
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONSetValuestring at cJSON.c...
CVE-2023-50471
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONInsertItemInArray at cJSON.c...
ALPINE-CVE-2023-50472
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONSetValuestring at cJSON.c...
Design/Logic Flaw
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONSetValuestring at cJSON.c...
Design/Logic Flaw
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONInsertItemInArray at cJSON.c...
CVE-2023-50472
CVE-2023-50472 affects cJSON v1.7.16 with a segmentation fault in cJSON_SetValuestring() at cJSON.c. Multiple connected advisories confirm impact across distributions (openSUSE, Ubuntu, Mageia, CBL-Mariner, TencentOS, RHEL/Satellite, OpenSUSE). Patches/upgrades exist: e.g., OpenSUSE SU-2024:0139-...
CVE-2023-50472
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONSetValuestring at cJSON.c...
CVE-2023-50471
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONInsertItemInArray at cJSON.c...
CVE-2023-50471
CVE-2023-50471 affects cJSON v1.7.16, caused by a segmentation violation in cJSON_InsertItemInArray() that can crash the parser. Multiple advisories note patches/upstream fixes: Fedora issued updates to cJSON 1.7.17 for various releases, Debian LTS recommends upgrading to 1.7.10-1.1+deb10u2, and ...
PT-2023-31573 · Cjson +3 · Cjson +3
Name of the Vulnerable Software and Affected Versions: cJSON version 1.7.16 Description: The issue is related to a segmentation violation in the function cJSON SetValuestring at cJSON.c. This indicates a potential problem with memory access that could lead to a crash or other unintended behavior...
CVE-2023-50471
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONInsertItemInArray at cJSON.c...
NULL Pointer Dereference
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONInsertItemInArray at cJSON.c...
CVE-2023-50472
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONSetValuestring at cJSON.c...
