4278 matches found
CVE-2021-33928: Out-of-bounds Write
Buffer overflow vulnerability in function poolinstallable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service...
GHSA-QGM6-9472-PWQ7 Integer Overflow in openssl-src
Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 indicating succes...
CVE-2020-18971
Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/PdfDictionary.cpp:65'...
CVE-2020-18971: Out-of-bounds Write
Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/PdfDictionary.cpp:65'...
CVE-2020-18972: Exposure of Resource to Wrong Sphere
Exposure of Sensitive Information to an Unauthorized Actor in PoDoFo v0.9.6 allows attackers to obtain sensitive information via 'IsNextToken' in the component 'src/base/PdfToenizer.cpp'...
CVE-2021-38714: Integer Overflow or Wraparound
In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA function in src/ssg/ssgLoadTGA.cxx file...
CVE-2020-18735
A heap buffer overflow in /src/ddsstream.c of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash...
CVE-2020-18735
CVE-2020-18735 relates to Eclipse IoT Cyclone DDS Project v0.1.0, with a heap buffer overflow in /src/dds_stream.c that causes the DDS subscriber server to crash. The connected documents confirm the root cause and the vulnerable file, and consistently describe a crash as the impact. No exploitati...
PT-2021-10230
Name of the Vulnerable Software and Affected Versions: Eclipse IOT Cyclone DDS Project version 0.1.0 Description: A heap buffer overflow in the /src/dds stream.c file causes the DDS subscriber server to crash. Recommendations: For Eclipse IOT Cyclone DDS Project version 0.1.0, consider disabling...
The vulnerability of the Thunderbird email client, related to the disclosure of information, allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Thunderbird email client is related to the exposure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through the src attribute...
CVE-2021-38291
FFmpeg version git commit de8e6e67e7523e48bb27ac224a0b446df05e1640 suffers from a an assertion failure at src/libavutil/mathematics.c...
CVE-2021-38291: Reachable Assertion
FFmpeg version git commit de8e6e67e7523e48bb27ac224a0b446df05e1640 suffers from a an assertion failure at src/libavutil/mathematics.c...
CVE-2021-38291
FFmpeg version git commit de8e6e67e7523e48bb27ac224a0b446df05e1640 suffers from a an assertion failure at src/libavutil/mathematics.c...
CVE-2021-37232
A stack overflow vulnerability occurs in Atomicparsley 20210124.204813.840499f through AParread64 in src/util.cpp due to the lack of buffer size of uint32buffer while reading more bytes in AParread64...
CVE-2021-37232
A stack overflow vulnerability occurs in Atomicparsley 20210124.204813.840499f through AParread64 in src/util.cpp due to the lack of buffer size of uint32buffer while reading more bytes in AParread64...
CVE-2021-37232: Out-of-bounds Write
A stack overflow vulnerability occurs in Atomicparsley 20210124.204813.840499f through AParread64 in src/util.cpp due to the lack of buffer size of uint32buffer while reading more bytes in AParread64...
CVE-2021-37231: Out-of-bounds Write
A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through AParreadX in src/util.cpp while parsing a crafted mp4 file because of the missing boundary check...
CVE-2021-37232
CVE-2021-37232 describes a stack overflow in AtomicParsley (version 20210124.204813.840499f) triggered by APar_read64() in src/util.cpp due to the lack of buffer size for uint32_buffer when reading more bytes. Public sources (NVD) assign a high to critical impact (CVSS v3.1: 9.8, HIGH/CRITICAL ac...