CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

duckdb:parse_fuzz_test: Crash in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=4690585050546176 Project: duckdb Fuzzing Engine: libFuzzer Fuzz Target: parsefuzztest Job Type: libfuzzerubsanduckdb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to an Undefined Behavior allowing an attacker to crash the system via a maliciously crafted Input to API...

CVE-2022-20402: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-218701042References: N/A...

CVE-2022-20408: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-204782372References: N/A...

CVE-2022-20380: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-212625740References: N/A...

CVE-2022-20378: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-234657153References: N/A...

CVE-2022-20365: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/A...

CVE-2022-20406: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-184676385References: N/A...

CVE-2022-20370: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-215730643References: N/A...

CVE-2022-20404: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-205714161References: N/A...

CVE-2022-20405: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-216363416References: N/A...

CVE-2022-20407: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-210916981References: N/A...

CVE-2022-20384: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-211727306References: N/A...

CVE-2022-20381: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-188935887References: N/A...

golang: crypto/elliptic: IsOnCurve returns true for invalid field elements

A flaw was found in the elliptic package of the crypto library in golang when the IsOnCurve function could return true for invalid field elements. This flaw allows an attacker to take advantage of this undefined behavior, affecting the availability and integrity of the resource...

CVE-2022-30133: Undefined Security Weakness

Windows Point-to-Point Protocol PPP Remote Code Execution Vulnerability...

OESA-2022-1810 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

vim diff_write_buffer function buffer overflow vulnerability

Vim is a cross-platform text editor. vim suffers from a buffer overflow vulnerability that results from undefined behavior in the diffwritebuffer function. An attacker could exploit this vulnerability to cause a buffer overflow...

CVE-2022-21788

In scp, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06988728; Issue ID: ALPS06988728...