Buffer Overflow

libexiv2.so is vulnerable to buffer overflow. The vulnerability exists when datasize is less than headersize in the WebPImage::getHeaderOffset function of webpimage.cpp, allowing an attacker to cause an application crash through the integer overflow by providing a malicious input...

Denial Of Service (DoS)

github.com/cloudflare/cfrpki is vulnerable to denial of service. The vulnerability exists because the validationLoop function in octorpki.go exceeds the max iterations parameter when creating long chains of CAs, allowing an attacker to crash the application...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to the use after free in the qfupdatebuffer function of quickfix.c, allowing an attacker to cause an application crash through malicious input...

Heap-based Buffer Overflow

libexiv2.so is vulnerable to heap-based buffer overflows. The vulnerability exists due to a null pointer dereference in quicktimevideo.cpp which allows an attacker to cause buffer overflows resulting in an application crash...

Google Chrome Vulkan buffer overflow vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that could be exploited by attackers to overflow a buffer and execute arbitrary code on the system or cause the application to crash...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libmad (SUSE-SU-2022:3782-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3782-1 advisory. - CVE-2017-8373: Fixed heap-based buffer overflow in madlayerIII bsc1036968. - CVE-2017-8372:...

Denial Of Service (DoS)

github.com/fluxcd is vulnerable to Denial of Service. The vulnerability exists due to the lack of data fields validation in the metav1.Duration parameter in multiple fluxcd repositories which allows an attacker to cause an application crash...

Denial Of Service (DoS)

parse-server is vulnerable to denial of service. The vulnerability exists in multiple functions due to user inputs not properly validated which allows an attacker to send a file download request with an invalid byte range causing an application crash...

Use After Free

libexpat.so is vulnerable to use-after-free. The vulnerability exists due to a lack of entity value validations in the XMLParserFree parameter of the parserCreate function in xmlparse.c. An attacker could exploit it to lead to memory consumption resulting in an application crash...

Denial Of Service (DoS)

github.com/free5gc/free5gc is vulnerable to denial of service. The vulnerability exists due to a index-out-of-range panic in aper.GetBitString, allowing an attacker to crash the application through the AMF and NGAP decoders by providing a maliciously crafted NGAP message...

LibTIFF Buffer Overflow Vulnerability (CNVD-2022-72096)

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for handling TIFF files.LibTIFF version 4.4.0 is vulnerable to a buffer overflow vulnerability, which stems from the existence of multiple heap buffer overflows th...

UBUNTU-CVE-2022-3570

Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact...

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, Inc. A buffer overflow vulnerability exists in Google Chrome Media Galleries, which is caused by a failure of Media Gallery to properly bounds check. An attacker could exploit the vulnerability to make an overflow buffer and execute arbitrary code on th...

CVE-2022-3570

Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service. The vulnerability is due to memory corruption in the function TIFFmemset of processCropSelections inside the tiffcrop.c file, which allows an attacker to crash the application via a malicious tiff file...

Denial Of Service (DoS)

libdiff.so is vulnerable to denial of service. The vulnerability is due to the multiple heap buffer overflows in tiffcrop.c, allowing an attacker to trigger unsafe or out-of-bounds memory access via maliciously crafted TIFF image, resulting in an application crash...

Denial Of Service (DoS)

virtualbox is vulnerable to denial of service. The vulnerability exists because an attacker with logon infrastructure is able to compromise the virtualbox causing an application crash...

Denial Of Service (DoS)

virtualbox is vulnerable to denial of service. The vulnerability exists because an attacker with logon infrastructure is able to compromise the virtualbox causing an application crash...

Denial Of Service (DoS)

virtualbox is vulnerable to denial of service. The vulnerability exists because an attacker with logon infrastructure is able to compromise the virtualbox causing an application crash...

Denial Of Service (DoS)

protobuf-c is vulnerable to denial of service. The vulnerability exists in parsetagandwiretype function of protobuf-c/protobuf-c.c which allows an attacker to cause an application crash...