CVE-2022-35011

PNGDec commit 8abf6be was discovered to contain a global buffer overflow via inflatefast at /src/inffast.c...

CVE-2022-35011

PNGDec commit 8abf6be was discovered to contain a global buffer overflow via inflatefast at /src/inffast.c...

CVE-2022-35003

JPEGDEC commit be4843c was discovered to contain a global buffer overflow via ucDitherBuffer at /src/jpeg.inl...

CVE-2022-35004

JPEGDEC commit be4843c was discovered to contain a FPE via TIFFSHORT at /src/jpeg.inl...

CVE-2022-35002

JPEGDEC commit be4843c was discovered to contain a segmentation fault via TIFFSHORT at /src/jpeg.inl...

CVE-2022-34999

JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl...

CVE-2022-34998

JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl...

CVE-2022-34998

JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl...

Remote Code Execution

react-editable-json-tree is vulnerable to remote code execution.The vulnerability exists in onSubmitValueParser prop which calls parse function in src/utils/parse.js because of missing sanitization of the parse parameters which allows a remote attacker to inject and execute malicious code into th...

PT-2022-22482

Name of the Vulnerable Software and Affected Versions JPEGDEC affected versions not specified Description A global buffer overflow issue was discovered in JPEGDEC via the ucDitherBuffer at /src/jpeg.inl. Recommendations At the moment, there is no information about a newer version that contains a...

JPEGDEC 安全漏洞

JPEGDEC is a JPEG decoder optimized for Arduino by the individual developer Larry Bank. A security vulnerability exists in JPEGDEC that stems from a segmentation error in the TIFFSHORT module of the /src/jpeg.inl file...

PT-2022-22481

Name of the Vulnerable Software and Affected Versions JPEGDEC affected versions not specified Description A segmentation fault was discovered in JPEGDEC via TIFFSHORT at /src/jpeg.inl, which can be exploited to cause a crash. Recommendations At the moment, there is no information about a newer...

PT-2022-22820

Name of the Vulnerable Software and Affected Versions ffjpeg affected versions not specified Description A memory leak was discovered in ffjpeg via the /src/jfif.c file. The issue is related to the "ffjpeg commit caade60a69633d74100bd3c2528bddee0b6a1291". Recommendations At the moment, there is n...

CVE-2022-35433: Missing Release of Memory after Effective Lifetime

ffjpeg commit caade60a69633d74100bd3c2528bddee0b6a1291 was discovered to contain a memory leak via /src/jfif.c...

CVE-2022-35004: Undefined Security Weakness

JPEGDEC commit be4843c was discovered to contain a FPE via TIFFSHORT at /src/jpeg.inl...

CVE-2022-35002: Undefined Security Weakness

JPEGDEC commit be4843c was discovered to contain a segmentation fault via TIFFSHORT at /src/jpeg.inl...

Buffer Over-read in function utf_head_off

Description Buffer Over-read in function utfheadoff at vim/src/mbyte.c:3872 vim version git log commit 249e1b903a9c0460d618f6dcc59aeb8c03b24b20 grafted, HEAD - master, tag: v9.0.0213, origin/master, origin/HEAD Proof of Concept ./vim/src/vim -u NONE -X -Z -e -s -S poc3hbo.dat -c :qa!...

PT-2022-33130

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.289 Description The issue is related to the use of separate src/dst nodes when preloading css sets for migration in cgroup. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-33061

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.253 Description The issue is related to the use of separate src/dst nodes when preloading css sets for migration in cgroup. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-32847

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description The issue is related to the use of separate src/dst nodes when preloading css sets for migration in cgroup. The actual impact and attack plausibility have not yet been proven. Recommendation...