CVE-2023-1729

A flaw was found in LibRaw. A heap-buffer-overflow in raw2imageex caused by a maliciously crafted file may lead to an application crash...

CVE-2023-1729

LibRaw (the RAW image decoding library) is affected by a heap-buffer-overflow in raw2image_ex() triggered by processing maliciously crafted files, which may cause an application crash. This CVE-2023-1729 is cited across multiple advisories (Debian, AlmaLinux, CNVD, etc.) and is confirmed by conne...

Denial Of Services (DoS)

libpodofo.so is vulnerable to Denial Of Services DoS. The vulnerability exists due to the segmentation fault in the CreateFromObject function of PdfEncrypt.cpp, which allows an attacker to cause an application crash through the SIGSEGV error by providing a maliciously crafted pdf file...

Denial Of Service (DoS)

github.com/sigstore/rekor is vulnerable to Denial Of Service DoS. The vulnerability exists because the archive metadata file size is not checked before the files are read to memory which can lead to out of memory conditions resulting in an application crash...

Denial Of Services (DoS)

engine.io is vulnerable to Denial Of Services DoS. The vulnerability exists due to the uncaught exception that occurs in the handleUpgrade function of server.ts and userver.ts when providing an invalid query param, which allows an attacker to crash the application through a maliciously crafted...

CVE-2023-32570

VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit...

CVE-2023-32570

VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit...

Denial Of Services (DoS)

OPCFoundation.NetStandard.Opc.Ua.Server is vulnerable to Denial Of Services DoS. The vulnerability exists due to the uncontrolled resource consumption in the library, which allows an attacker to send malicious requests that consume all memory available to the server, leading to an application cra...

Denial Of Services (DoS)

sqlite3 is vulnerable to Denial Of Services DoS. The vulnerability exists due to a segmentation fault in appendvfs.c, which allows an attacker to cause an application crash through a malicious input...

CVE-2023-32570

CVE-2023-32570 affects VideoLAN dav1d before 1.2.0. A race condition in thread_task.c related to dav1d_decode_frame_exit can lead to an application crash. Public advisories show the fix being delivered in 1.2.0+ (Fedora/SUSE advisories note upgrading to 1.2.1 or newer). Affected product: dav1d (A...

CVE-2023-32570

VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit...

CVE-2023-32570

VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit...

CVE-2023-32570

VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit...

CVE-2023-32570

VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit...

Denial Of Service (DoS)

IBM MQ Clients are vulnerable to Denial Of Service DoS. The vulnerability exists when processing configuration files which allows an attacker to cause an application crash...

Denial Of Service (DoS)

IBM MQ is vulnerable to Denial Of Service DoS. The vulnerability exists due to mishandling of authorization to craft messages which allows an attacker to cause an application crash via a crafted message...

Denial Of Service (DoS)

IBM MQ is vulnerable to Denial Of Service DoS attacks. The vulnerability exists due to an error processing invalid data which allows an attacker to cause an application crash...

Out-of-bounds Read

libmp4v2.so is vulnerable to Out-of-bounds Reads. The vulnerability exists in mp4track.cpp due to mishandling of compatibleBrand while processing a crafted mp4 file which allows an attacker to cause a heap based buffer over-reads resulting in an application crash...

Denial Of Services (DoS)

openrazer is vulnerable to Denial Of Services DoS. The vulnerability exists due to the buffer overflow in the razermouse driver of the library, which allows an attacker to cause an application crash and possibly escalate their privileges via a crafted buffer sent to the matrixcustomframe device...

Denial Of Services (DoS)

openrazer is vulnerable to Denial Of Services DoS. The vulnerability exists due to the buffer overflow in the razerkbd driver of the library, which allows an attacker to cause an application crash and possibly escalate their privileges via a crafted buffer sent to the matrixcustomframe device...