CVE-2022-42889. Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults.

Security Advisory ID : BSA-2022-2096 Component : Apache Commons Text Revision : 1.1 Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an...

Bento4 缓冲区错误漏洞

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0-639 contains a denial of service vulnerability that stems from a boundary error in the AP4BitReader::ReadCache function in mp42ts when handling untrusted input. An attacker could exploit the vulnerability to launc...

Bento4 缓冲区错误漏洞

Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0-639 contains a denial of service vulnerability that stems from a boundary error in the AP4BitReader::SkipBitsunsigned int function in mp42ts when handling untrusted input. An attacker could exploit the vulnerabili...

Bento4 缓冲区错误漏洞

Bento4 is an open source C library for reading and writing MP4 files. version v1.6.0-639 of Bento4 suffers from a denial of service vulnerability, which stems from a boundary error in AP4Dec3Atom::AP4Dec3Atom in Ap4Dec3Atom.cpp when handling untrusted input. An attacker could exploit the...

OTFCC Heap Buffer Overflow Vulnerability (CNVD-2023-10598)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. OTFCC suffers from a heap buffer overflow vulnerability that originates from a boundary error in /release-x64/otfccdump+0x6b05aa when handling untrusted input. An attacker could exploit the...

OTFCC Buffer Overflow Vulnerability (CNVD-2023-11780)

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files.OTFCC 0.10.4 and earlier versions have a buffer overflow vulnerability that stems from /release-x64/otfccdump 0x6b558f a boundary error when processing untrusted input, which can be exploite...

OTFCC Heap Buffer Overflow Vulnerability (CNVD-2023-10594)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. OTFCC suffers from a heap buffer overflow vulnerability that originates from a boundary error in /release-x64/otfccdump+0x6b03b5 when handling untrusted input. An attacker could exploit the...

OTFCC Heap Buffer Overflow Vulnerability (CNVD-2023-10597)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. OTFCC suffers from a heap buffer overflow vulnerability that originates from a boundary error in /release-x64/otfccdump+0x6b04de when handling untrusted input. An attacker could exploit the...

OTFCC Heap Buffer Overflow Vulnerability (CNVD-2023-10591)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. OTFCC suffers from a heap buffer overflow vulnerability that originates from a boundary error in /release-x64/otfccdump+0x617087 when handling untrusted input. An attacker could exploit the...

OTFCC Buffer Overflow Vulnerability (CNVD-2023-11784)

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files.OTFCC 0.10.4 and earlier versions have a buffer overflow vulnerability that originates in /release-x64/otfccdump 0x6c0473 with a boundary error when processing untrusted input, which can be...

OTFCC Heap Buffer Overflow Vulnerability (CNVD-2023-10595)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. OTFCC suffers from a heap buffer overflow vulnerability that originates from a boundary error in /release-x64/otfccdump+0x6b0466 when handling untrusted input. An attacker could exploit the...

OTFCC Heap Buffer Overflow Vulnerability (CNVD-2023-10599)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. OTFCC suffers from a heap buffer overflow vulnerability that originates from a boundary error in /release-x64/otfccdump+0x6b05ce when handling untrusted input. An attacker could exploit the...

OTFCC Heap Buffer Overflow Vulnerability (CNVD-2023-10593)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. OTFCC suffers from a heap buffer overflow vulnerability that originates from a boundary error in /release-x64/otfccdump+0x61731f when handling untrusted input. An attacker could exploit the...

OTFCC Heap Buffer Overflow Vulnerability (CNVD-2023-10592)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. OTFCC suffers from a heap buffer overflow vulnerability that originates from a boundary error in /release-x64/otfccdump+0x6171b2 when handling untrusted input. An attacker could exploit the...

OTFCC Heap Buffer Overflow Vulnerability (CNVD-2023-10596)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. OTFCC suffers from a heap buffer overflow vulnerability that originates from a boundary error in /release-x64/otfccdump+0x6b0478 when handling untrusted input. An attacker could exploit the...

OTFCC Heap Buffer Overflow Vulnerability (CNVD-2023-10590)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. OTFCC suffers from a heap buffer overflow vulnerability that originates from a boundary error in /release-x64/otfccdump+0x4adb11 when handling untrusted input. An attacker could exploit the...

OTFCC Buffer Overflow Vulnerability (CNVD-2023-11783)

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files. OTFCC 0.10.4 and earlier versions contain a buffer overflow vulnerability that originates in /release-x64/otfccdump 0x6c0414 with a boundary error when processing untrusted input, which can...

Integer Overflow

ImageMagick is vulnerable to Integer Overflow. The vulnerability exists outside the range of representable values of type unsigned long at coders/pcl.c which allows an attacker to send crafted or untrusted input causing an overflow...

OTFCC 缓冲区错误漏洞

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. OTFCC suffers from a heap buffer overflow vulnerability that originates from a boundary error in /release-x64/otfccdump+0x6b03b5 when handling untrusted input. An attacker could exploit the...

OTFCC 缓冲区错误漏洞

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. OTFCC suffers from a heap buffer overflow vulnerability that originates from a boundary error in /release-x64/otfccdump+0x6171b2 when handling untrusted input. An attacker could exploit the...