PT-2021-6503 · Unknown +1 · Tinyobjloader +1

Name of the Vulnerable Software and Affected Versions: tinyobjloader versions v2.0-rc1 through development commit 79d4421 Description: An improper array index validation issue exists in the LoadObj functionality, allowing a specially crafted file to potentially lead to code execution. An attacker...

glib: integer overflow in g_byte_array_new_take function when called with a buffer of 4GB or more on a 64-bit platform

An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If gbytearraynewtake was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 232, causing unintended length truncation...

pcsc-lite bug fix and enhancement update

PC/SC Lite provides a Windows SCard compatible interface for communicating with smart cards, smart card readers, and other security tokens. Bug Fixes: Increase global reader array size to 48 to address issue with RHCS secure channel creation BZ1972569 Increase global reader array size to 48 to...

CVE-2020-36465

An issue was discovered in the generic-array crate before 0.13.3 for Rust. It violates soundness by using the arr! macro to extend lifetimes...

CVE-2020-36465

An issue was discovered in the generic-array crate before 0.13.3 for Rust. It violates soundness by using the arr! macro to extend lifetimes...

DEBIAN-CVE-2020-36465

An issue was discovered in the generic-array crate before 0.13.3 for Rust. It violates soundness by using the arr! macro to extend lifetimes...

CVE-2020-36452

An issue was discovered in the array-tools crate before 0.3.2 for Rust. FixedCapacityDequeLike::clone has a drop of uninitialized memory...

CVE-2020-36452

An issue was discovered in the array-tools crate before 0.3.2 for Rust. FixedCapacityDequeLike::clone has a drop of uninitialized memory...

Design/Logic Flaw

An issue was discovered in the array-tools crate before 0.3.2 for Rust. FixedCapacityDequeLike::clone has a drop of uninitialized memory...

UBUNTU-CVE-2020-36465

An issue was discovered in the generic-array crate before 0.13.3 for Rust. It violates soundness by using the arr! macro to extend lifetimes...

Design/Logic Flaw

An issue was discovered in the generic-array crate before 0.13.3 for Rust. It violates soundness by using the arr! macro to extend lifetimes...

CVE-2020-36465

An issue was discovered in the generic-array crate before 0.13.3 for Rust. It violates soundness by using the arr! macro to extend lifetimes...

CVE-2020-36452

The CVE-2020-36452 issue affects the Rust crate array-tools prior to 0.3.2. The vulnerability is in FixedCapacityDequeLike::clone(), which can drop uninitialized memory, causing memory corruption. CVSS info from NVD shows high to critical impact (base scores 7.5–9.8) with network attack vector an...

CVE-2020-36452

An issue was discovered in the array-tools crate before 0.3.2 for Rust. FixedCapacityDequeLike::clone has a drop of uninitialized memory...

CVE-2020-36465

The CVE-2020-36465 issue affects the Rust generic-array crate before 0.13.3. The root cause is a soundness problem caused by using the arr! macro to extend lifetimes. This aligns with multiple sources describing a memory-safety/soundness vulnerability in generic-array (pre-0.13.3). The connected ...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation.A memory corruption vulnerability exists in versions of Mozilla Rust prior to 0.3.2, which stems from Rust's array-tools crate. for fixedcapacitydequelikes:: clone has an uninitialized memory. An attacker could...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. fizyk20/generic-array of Mozilla Rust suffers from a memory corruption vulnerability, which can be exploited by attackers to cause various memory corruption scenarios...

Vulnerability Spotlight: Use-after-free vulnerability in tinyobjloader

Lilith of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered that a specific function of tinyobjloader does not properly validate array indexes. An adversary could trick a user into opening a specially crafted file, causing an index... This is only the...

UVI-2021-1001317 scsi: libfc: Fix array index out of bound exception

scsi: libfc: Fix array index out of bound exception This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.135 by commit...

GSD-2021-1001254 scsi: libfc: Fix array index out of bound exception

scsi: libfc: Fix array index out of bound exception This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.53 by commit...