3901 matches found
FFmpeg buffer overflow vulnerability (CNVD-2024-27562)
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in Ffmpeg version v.N113007-g8d24a28d06 due to incorrect bounds checking in libavfilter/freverse.c:269:26 in the areverserequestframe, which can be...
FFmpeg buffer overflow vulnerability (CNVD-2024-27563)
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in Ffmpeg version v.N113007-g8d24a28d06 due to incorrect bounds checking as a result of a floating-point exception FPE error at...
Out-of-bounds Write
gtkwave is vulnerable to Out-of-bounds Write. The vulnerability is due to insufficient bounds checking in the in the VCD parsevaluechange portdump functionality via the GUI's legacy VCD parsing code, allows specially crafted .vcd file can lead to arbitrary code execution...
Out-of-bounds Write
gtkwave is vulnerable to Out-of-bounds Write. The vulnerability is due to inadequate bounds checking within its VCD parsevaluechange portdump functionality by the vcd2lxt2 conversion utility. It allows a Crafting a specially designed .vcd file can result in arbitrary code execution...
Out-of-bounds Write
gtkwave is vulnerable to Out-of-bounds Write. The vulnerability is due to insufficient bounds checking within its VCD parsevaluechange portdump functionality via the vcd2vzt conversion utility. It allows a Crafting a specially designed .vcd file can result in arbitrary code execution...
Out-of-Bounds-Read
gtkwave is vulnerable to Out-of-Bounds-Read. The vulnerability is due to inadequate bounds checking within its VCD var definition section functionality via the GUI's default VCD parsing code. It allows a Crafting a specially designed .vcd file can result in arbitrary code execution...
Out-of-Bounds-Read
gtkwave is vulnerable to Out-of-bounds Write. The vulnerability is due to inadequate bounds checking within its VCD var definition section functionality via the GUI's legacy VCD parsing code. It allows a Crafting a specially designed .vcd file can result in arbitrary code execution...
CVE-2024-3120
A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1. The flaw is due to inadequate bounds checking when copying 'Content-Length' and 'Warning' headers into fixed-size buffers in the sipvalidatepacket and sipparseextraheaders functions within src/sip.c. This...
CVE-2024-3120 Stack-Buffer Overflow in 'Content-Length' and 'Warning' Header Processing in sngrep
A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1. The flaw is due to inadequate bounds checking when copying 'Content-Length' and 'Warning' headers into fixed-size buffers in the sipvalidatepacket and sipparseextraheaders functions within src/sip.c. This...
USN-6710-2: Firefox regressions
USN-6710-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. Original advisory details: Manfred Paul discovered that Firefox did not properly perform bounds checking during range analysis, leading to an out-of-bounds write...
Integer Overflow
gtkwave is vulnerable to Integer Overflow.The vulnerability is due to insufficient input validation and bounds checking within the VZT facgeometry parsing functionality in .vzt file, allow attackers to manipulate certain input parameters during the allocation of the rows array...
Integer Overflow
gtkwave is vulnerable to Integer Overflow.The vulnerability is due to insufficient input validation and bounds checking within the VZT facgeometry parsing functionality in .vzt file, allow attackers to manipulate certain input parameters during the allocation of the len array...
Integer Overflow
gtkwave is vulnerable to Integer Overflow.The vulnerability is due to insufficient input validation and bounds checking within the VZT facgeometry parsing functionality in .vzt file, allow attackers to manipulate certain input parameters during the allocation of the lsb array...
Integer Overflow
gtkwave is vulnerable to Integer Overflow.The vulnerability is due to insufficient input validation and bounds checking within the VZT facgeometry parsing functionality in .vzt file, allow attackers to manipulate certain input parameters during the allocation of the vindexoffset array...
Integer Overflow
gtkwave is vulnerable to Integer Overflow.The vulnerability is due to insufficient input validation and bounds checking within the VZT facgeometry parsing functionality in .vzt file, allow attackers to manipulate certain input parameters during the allocation of the flags array...
Integer Overflow
gtkwave is vulnerable to Integer Overflow.The vulnerability is due to insufficient input validation and bounds checking within the VZT vztrdblockvchdecode times parsing functionality in .vzt file, allow attackers to manipulate certain input parameters, particularly numtimeticks...
Integer Overflow
gtkwave is vulnerable to Integer Overflow. The vulnerability is due to insufficient input validation and bounds checking within th VZT vztrdblockvchdecode dictionary parsing functionality in .vzt file allow attackers to manipulate certain input parameters, particularly numtimeticks...
Integer Overflow
gtkwave is vulnerable to Integer Overflow.The vulnerability is due to insufficient input validation and bounds checking within the VZT vztrdblockvchdecode times parsing functionality in .vzt file, allow attackers to manipulate certain input parameters, particularly numtimeticks...
Stack Based Buffer Overflow
gtkwave is vulnerable to Stack Based Buffer Overflow. The vulnerability is due to insufficient bounds checking in the fstReaderVarint32 function. Crafted .fst files, allowing attackers to execute arbitrary code execution when opened by a victim...
Stack Based Buffer Overflow
gtkwave is vulnerable to Stack Based Buffer Overflow. The vulnerability is due to insufficient bounds checking in the fstReaderVarint32WithSkip function. Crafted .fst files, allowing attackers to execute arbitrary code execution when opened by a victim...