803 matches found
CVE-2024-2689 Denial of Service if invalid UTF-8 sent
Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If left unchecked, the task containing the invalid...
PT-2024-40301 · Packagist · Typo3/Cms
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A security issue exists due to a too loose type check in an API method. This allows attackers to bypass the directory traversal check by providing an invalid UTF-8 encoding sequence...
GHSA-V363-RRF2-5FMJ ferris-says has undefined behavior when not using UTF-8
Affected versions receive a &u8 from the caller through a safe API, and pass it directly to the unsafe str::fromutf8unchecked function. The behavior of ferrissays::say is undefined if the bytes from the caller don't happen to be valid UTF-8. The flaw was corrected in ferris-says21 by using the sa...
Unsound use of str::from_utf8_unchecked on bytes which are not UTF-8
Affected versions receive a &u8 from the caller through a safe API, and pass it directly to the unsafe str::fromutf8unchecked function. The behavior of ferrissays::say is undefined if the bytes from the caller don't happen to be valid UTF-8. The flaw was corrected in ferris-says21 by using the sa...
SUSE CVE-2023-40032
libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfault when attempting to parse a malformed UTF-8 character. Users should upgrade to libvips version 8.14.4 or later when processing untruste...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. A specially crafted SVG input can cause a segfault when attempting to parse a malformed UTF-8 character. Workaround Users who are unable to upgrade to the fixed version can compile the library without SVG suppo...
UBUNTU-CVE-2023-40032
libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfault when attempting to parse a malformed UTF-8 character. Users should upgrade to libvips version 8.14.4 or later when processing untruste...
libvips Code Issues Vulnerabilities
libvips is an open source 2D image processing library. A code issue vulnerability exists in libvips 8.14.3 and earlier versions, which stems from an attempt to parse misformatted UTF-8 characters, where an attacker can cause a segmentation error in libvips via specially crafted SVG input...
CVE-2023-40295
libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...
CVE-2023-30125
EyouCms V1.6.1-UTF8-sp1 is vulnerable to Cross Site Scripting XSS...
PT-2023-21863 · Comrak · Comrak
Name of the Vulnerable Software and Affected Versions: comrak versions prior to 0.17.0 Description: The issue arises when a Comrak AST is constructed manually and then converted to HTML, as the HTML formatting code assumes the AST is well-formed. This assumption can be violated if the AST contain...
SUSE CVE-2023-26302
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...
CVE-2023-26302
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...
DEBIAN-CVE-2023-26302
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...
PYSEC-2023-23
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...
UBUNTU-CVE-2023-26302
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...
PT-2023-20600
Name of the Vulnerable Software and Affected Versions markdown-it-py versions prior to 2.2.0 Description Denial of service could be caused to the command line interface of markdown-it-py if an attacker was allowed to use invalid UTF-8 characters as input. Recommendations For versions prior to...
SUSE CVE-2005-0086
Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted file, as demonstrated using the UTF-8 locale...
SUSE CVE-2005-2102
The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service application crash via a filename that contains invalid UTF-8 characters...
SUSE CVE-2006-0019
Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allows remote attackers to execute arbitrary code via a crafted, UTF-8 encoded URI...