4285 matches found
CVE-2020-36177
RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...
CVE-2020-36177: Out-of-bounds Write
RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...
CVE-2020-27845
There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability...
CVE-2020-27844
A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as...
CVE-2020-27841
There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability...
CVE-2020-27845: Out-of-bounds Read
There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability...
CVE-2020-27844: Improper Input Validation
A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as...
CVE-2020-27841: Heap-based Buffer Overflow
There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability...
Google TensorFlow Buffer Overflow Vulnerability (CNVD-2021-00091)
Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from a buffer overflow vulnerability that stems from the DataFormatVecPermute API not validating the src format and dst format attributes. An attacker could exploit the...
PT-2020-5601
Name of the Vulnerable Software and Affected Versions openjpeg versions prior to 2.4.0 Description A flaw was found in openjpeg's src/lib/openjp2/t2.c, allowing an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from...
PT-2021-6542
Name of the Vulnerable Software and Affected Versions libsolv versions prior to 0.7.17 Description The issue is related to a buffer overflow vulnerability in the pool disabled solvable function in the src/repo.h component of the libsolv library. This vulnerability allows attackers to cause a Deni...
PT-2020-6626
Name of the Vulnerable Software and Affected Versions libsolv versions prior to 0.7.17 Description The issue is related to a buffer overflow vulnerability in the prune to recommended function in src/policy.c of the libsolv library. This vulnerability allows attackers to cause a Denial of Service...
PT-2020-6436
Name of the Vulnerable Software and Affected Versions libsolv affected versions not specified Description The issue is related to a buffer overflow vulnerability in the testcase read function of the src/testcase.c component in the Libsolv library. This vulnerability could allow a remote attacker ...
WS-2020-0306
OpenSC before 0.22.0-rc1 is vulnerable to stack-use-after-return in insertpin on src/libopensc/pkcs15-tcos.c...
WS-2020-0309
Fluent Bit before v1.7.2 is vulnerable to heap-buffer-overflow in flbsdscatutf8 on src/flbsds.c...
WS-2020-0307
Fluent Bit before v1.7.2 is vulnerable to heap-buffer-overflow in processchunkeddata on src/flbhttpclient.c...
CVE-2020-15710 Potential double-free in pulseaudio
Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in...
CVE-2020-15710
Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in...
CVE-2020-15710: Double Free
Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in...