IBM MQ Operator buffer error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0 through 3.9.2, and 4.0.0 through 4.0.4 have a buffer error vulnerability. This...

rdesktop buffer error vulnerability

rdesktop versions 1.9.0 and earlier have a buffer error vulnerability. This vulnerability stems from the processrawbmpcache function in orders.c, which allows for out-of-buffer access to the heap. A malicious RDP server can exploit this vulnerability by sending raw bitmap cache commands with...

IBM MQ Operator buffer error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3, and 4.0.4 have a buffer error...

Pillow buffer error vulnerability

Pillow versions from 2.0.0 to 13.0.0 contain a buffer error vulnerability. This vulnerability arises when tiffWriteProc saves compressed TIFF data to targets without an available fileno such as BytesIO using libtiff. It allocates memory based on the previous buffer size rather than the current...

Pillow buffer error vulnerability

Versions of Pillow prior to 13.0.0 have a buffer error vulnerability. This vulnerability stems from the JPEG decoder not verifying the actual output width and number of components of libjpeg after requesting scaling. As a result, full-width scanning lines are written into the buffer allocated for...

IBM MQ Operator buffer error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3, and 4.0.4 have a buffer error...

Michael R Sweet Mini-XML buffer error vulnerability

Michael R Sweet’s Mini-XML versions 4.0.5 and 4.0.6 have security vulnerabilities. These vulnerabilities stem from the mxmlloaddata function in the mxml-file.c file, where a reuse of resources after release occurs. Attackers can exploit this vulnerability remotely...

IBM MQ Operator buffer error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0 through 3.8.1, 3.9.0 through 3.9.2, and 4.0.0 through 4.0.4 have a buffer error...

Tencent ncnn buffer error vulnerability

Tencent ncnn has a buffer error vulnerability. This vulnerability stems from improper handling of the matmultransb function in the file src/layer/matmul.cpp within the MatMul component. It may lead to out-of-bounds reading, and remote attackers can exploit this to carry out attacks...

Zephyr buffer error vulnerability

Zephyr versions 3.3.0 to 4.4.2 have a buffer error vulnerability. This vulnerability stems from the Reply function cpdecoderesponse in the OSDP control panel, which does not check the upper limit of the payload length for REPLYKEYPPAD and REPLYRAW responses. As a result, when memcopy is used to...

Pillow buffer error vulnerability

Pillow versions from 8.1.0 to 13.0.0 contain a buffer error vulnerability. This vulnerability arises due to inconsistencies in the interpretation of identical tags such as PhotometricInterpretation or BitsPerSample during TIFF tile and RGBA decoding processes. Pillow and libtiff do not verify...

Zephyr buffer error vulnerability

Zephyr versions 3.4.0 to 4.4.2 have a buffer error vulnerability. This vulnerability stems from the user-mode system call verifier zvrfyrtiocqegetmempoolbuffer in subsys/rtio/rtiosyscalls.c. This verifier uses KSYSCALLMEMORYREAD instead of KSYSCALLMEMORYWRITE to validate the output parameters buf...

Pillow buffer error vulnerability

Versions of Pillow prior to 13.0.0 have a buffer error vulnerability. This vulnerability stems from the P;2L and P;4L original decoders, which can read beyond the end of the input buffer. Additionally, the calculated by ImagingRawDecode is smaller than the actual space occupied by the unpacker...

Pillow buffer error vulnerability

Versions of Pillow prior to 13.0.0 have a buffer error vulnerability. This vulnerability arises from the FlashPix JPEG-tile decoder, which, when processing specially crafted OLE2 FlashPix files, fails to recognize the JPEG mode and instead decodes it as a four-component JCSUNKNOWN. As a result,...

Pillow buffer error vulnerability

Pillow versions from 8.2.0 to 13.0.0 contain a buffer error vulnerability. This vulnerability stems from the tiled-TIFF decoder, which reads beyond the bounds of the tile buffer when copying four-byte pixels. In decodeTile, the tile allocation returned by libtiff is less than the required row...

Lode Vandevenne has a buffer error vulnerability

Lode Vandevenne’s lodepng 20261006 and earlier versions have a buffer error vulnerability. This vulnerability stems from the lodepng::getFilterTypesInterlaced function in lodepngutil.cpp, which fails to perform boundary checks on the decompressed IDAT data. As a result, a stack overflow attack is...

Mzanzi Open Source Solutions Schroedinger buffer error vulnerability

Mzanzi Open Source Solutions’ schroedinger 1.0.11 and earlier versions contain a buffer error vulnerability. This vulnerability arises from the lack of validation for wavelet filter indices or transformation depth values, which may lead to out-of-bounds reading of static quantization tables...

Johannes Kuhlmann cgltf buffer error vulnerability

Johannes Kuhlmann’s cgltf versions prior to 1.15 contain a buffer error vulnerability. This vulnerability stems from the cgltfaccessorunpackfloats function, which advances the cursor based on the byteStride of the base bufferView when handling sparse values. This allows for heap out-of-bound...

Schism Tracker buffer error vulnerability

Schism Tracker 20260524 and earlier versions have a buffer error vulnerability. This vulnerability stems from the fmtultloadsong function in fmt/ult.c, which does not limit the number of single-byte samples to MAXSAMPLES. This may lead to out-of-buffer writing, allowing attackers to provide a...

libLAS buffer error vulnerability

LibLAS versions 1.8.1 and earlier have a buffer error vulnerability. This vulnerability arises from the point record reader truncating the schema byte size to 16 bits when calculating the point buffer size. An attacker can create a .las file with a schema exceeding 65,535 bytes, resulting in...