CVE-2021-21914

A heap-based buffer overflow vulnerability exists in the DecoderStream::Append functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

Heap overflow

A heap-based buffer overflow vulnerability exists in the DecoderStream::Append functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21914

A heap-based buffer overflow vulnerability exists in the DecoderStream::Append functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

PT-2022-9202 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.10 Description: A heap-based buffer overflow issue exists in the DecoderStream::Append functionality. This can be triggered by a specially-crafted file, potentially leading to code execution. An attacker can...

CVE-2021-21914: Heap-based Buffer Overflow

A heap-based buffer overflow vulnerability exists in the DecoderStream::Append functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

Accusoft ImageGear DecoderStream::Append heap-based buffer overflow vulnerability

Summary A heap-based buffer overflow vulnerability exists in the DecoderStream::Append functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Tested Versions Accusoft ImageGear 19.10...

Mozilla: Sandboxed iframes could have executed script if the parent appended elements

The Mozilla Foundation Security Advisory describes this flaw as: If a document created a sandboxed iframe without allow-scripts and subsequently appended an element to the iframe's document that, for example, had a JavaScript event handler - the event handler would have run despite the iframe's...

CVE-2021-40111

In Apache James, while fuzzing with Jazzer the IMAP parsing stack, we discover that crafted APPEND and STATUS IMAP command could be used to trigger infinite loops resulting in expensive CPU computations and OutOfMemory exceptions. This can be used for a Denial Of Service attack. The IMAP user nee...

CVE-2021-40111 Apache James IMAP parsing Denial Of Service

In Apache James, while fuzzing with Jazzer the IMAP parsing stack, we discover that crafted APPEND and STATUS IMAP command could be used to trigger infinite loops resulting in expensive CPU computations and OutOfMemory exceptions. This can be used for a Denial Of Service attack. The IMAP user nee...

PT-2022-11188

Name of the Vulnerable Software and Affected Versions Apache James versions prior to 3.6.1 Description The issue allows for a Denial Of Service attack through crafted APPEND and STATUS IMAP commands, which can trigger infinite loops and result in expensive CPU computations and OutOfMemory...

PT-2025-8661

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0 Description A signed integer overflow issue has been identified in the Linux kernel, specifically in the ip6 append data function. This issue arises when the length variable exceeds the maximum value that...

PT-2021-24335

Name of the Vulnerable Software and Affected Versions: UltraJSON aka ujson versions 1.34 through 5.1.0 Description: The issue is a stack-based buffer overflow in Buffer AppendIndentUnchecked, which is called from encode. This can be exploited, for example, by using a large amount of indentation...

DEBIAN-CVE-2021-44927

A null pointer dereference vulnerability exists in gpac 1.1.0 in the gfsgvrmlmfappend function, which causes a segmentation fault and application crash...

UBUNTU-CVE-2021-44927

A null pointer dereference vulnerability exists in gpac 1.1.0 in the gfsgvrmlmfappend function, which causes a segmentation fault and application crash...

PT-2021-24180

Name of the Vulnerable Software and Affected Versions: gpac version 1.1.0 Description: A null pointer dereference issue exists in the gf sg vrml mf append function, causing a segmentation fault and application crash. Recommendations: For gpac version 1.1.0, consider disabling the gf sg vrml mf...

PT-2021-27887

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the pn buffer append, pni data intern node, and pni...

Input validation

A vulnerability in Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to overwrite or append arbitrary data to system files using root-level privileges. The attacker must have administrative credentials on the device. This vulnerability is due to incomplete...

CVE-2021-34761

CVE-2021-34761 affects Cisco Firepower Threat Defense (FTD) Software. The issue stems from incomplete validation of user input for a specific CLI command, enabling an authenticated local attacker (with administrative credentials) to overwrite or append arbitrary data to system files with root-lev...

mysql-server:fuzz_initfile: Heap-buffer-overflow in String::append

Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=4632871726350336 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash...

PT-2021-27733

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue. The crash state involves several functions: ucl array append, ucl object copy internal, and ucl object cop...