Extreme PDF Reader suffers from an array out-of-bounds read vulnerability (CNVD-2021-17327)

Extreme PDF Reader is a simple, small, efficient and effective PDF reader developed by Beijing Haiteng Times Technology Co. Extreme PDF Reader has an array out-of-bounds reading vulnerability that can be exploited by attackers to cause the program to crash...

CGAL libcgal multiple code execution vulnerabilities in Nef polygon-parsing code

Summary Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigg...

Array Out-of-Bounds Write Vulnerability in Extreme PDF Reader

Extreme PDF Reader is a simple, small, efficient and effective PDF reader developed by Beijing Haiteng Times Technology Co. Extreme PDF Reader has an array out-of-bounds writing vulnerability that can be exploited by attackers to cause the program to crash...

CAJViewer has an array out-of-bounds read vulnerability

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJViewer suffers from an array out-of-bounds read vulnerability that can be exploited by an attacker to cause the program to crash...

CVE-2020-11223

Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2020-11223

Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

FreeBSD : raptor2 -- malformed input file can lead to a segfault (9c03845c-7398-11eb-bc0e-2cf05d620ecc)

Redland Issue Tracker reports : due to an out of bounds array access in raptorxmlwriterstartelementcommon. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2021 Jacques Vidrine and contributors...

Multiple memory safety issues in insert_row

When inserting rows from an iterator at a particular index, toodee would shift items over, duplicating their ownership. The space reserved for the new elements was based on the len returned by the ExactSizeIterator. This could result in elements in the array being freed twice if the iterator...

RUSTSEC-2021-0028 Multiple memory safety issues in insert_row

When inserting rows from an iterator at a particular index, toodee would shift items over, duplicating their ownership. The space reserved for the new elements was based on the len returned by the ExactSizeIterator. This could result in elements in the array being freed twice if the iterator...

GHSA-X7P5-P2C9-PHVG Unexpected database bindings

This is a follow-up to the previous security advisory GHSA-3p32-j457-pg5x which addresses a few additional edge cases. If a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the quer...

CentOS 8 : glibc (CESA-2020:4444)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4444 advisory. - glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions CVE-2020-10029 - glibc: array overflow in backtrace functions f...

Qualcomm RIL Buffer Error Vulnerability

Qualcomm RIL is a Qualcomm Incorporated USA support component used in chips. A buffer error vulnerability exists in Qualcomm RIL, which arises from a stack overflow that can occur when the configuration size of a GSM WCDMA broadcast received from a user is larger than a variable-length array...

Qualcomm Multimedia Security Vulnerability

Qualcomm Multimedia is a camera driver component from Qualcomm, Inc. A security vulnerability exists in Qualcomm Multimedia that stems from a failure to check the validity of an array index before copying to the array, resulting in an out-of-bounds in the camera driver...

CVE-2021-23328

This affects all versions of package iniparserjs. This vulnerability relates when iniparser.js is concentrating arrays. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program...

Design/Logic Flaw

This affects all versions of package iniparserjs. This vulnerability relates when iniparser.js is concentrating arrays. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program...

CVE-2021-23328

CVE-2021-23328 affects iniparserjs. The connected documents describe a Prototype Pollution vulnerability arising when ini_parser.js concentrates arrays, allowing an attacker to overwrite/pollute the Object.prototype based on user input. This affects all versions of the package per the CVE entry, ...

CentOS 8 : java-1.8.0-openjdk (CESA-2019:1816)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1816 advisory. - OpenJDK: Side-channel attack risks in Elliptic Curve EC cryptography Security, 8208698 CVE-2019-2745 - OpenJDK: Insufficient checks of suppressed...

CVE-2021-25902

An issue was discovered in the glsl-layout crate before 0.4.0 for Rust. When a panic occurs, maparray can perform a double drop...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Rust has a memory corruption vulnerability in versions prior to 0.2.3. The vulnerability stems from the program's implied randomness to arrays, so that uninitialized memory may be discarded in the event of an...

CVE-2020-11225

Out of bound access in WLAN driver due to lack of validation of array length before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...