CVE-2020-18775

CVE-2020-18775 affects Libav 12.3: a heap-based buffer over-read in vc1_decode_b_mb_intfi (vc1_block.c) can cause denial-of-service when processing crafted files. All connected sources corroborate the same vulnerable function and impact; no public details on specific exploit paths or patched vers...

CVE-2020-18771

Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmnint.cpp which can result in an information leak...

CVE-2020-18771

Exiv2 0.27.99.0 is affected by a global buffer over-read in Nikon1MakerNote::print0x0088 (nikonmn_int.cpp), enabling information leakage. The CVE is CVE-2020-18771. Connected advisories confirm this vulnerability exists in Exiv2 and have prompted remediation discussions. Affected software: Exiv2 ...

CVE-2020-18771

Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmnint.cpp which can result in an information leak...

CVE-2020-18771

Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmnint.cpp which can result in an information leak...

CVE-2021-39247

Zint Barcode Generator before 2.10.0 has a one-byte buffer over-read, related to islastsingleascii in code1.c, and rsencodeuint in reedsol.c...

CVE-2021-39247

Zint Barcode Generator before 2.10.0 has a one-byte buffer over-read, related to islastsingleascii in code1.c, and rsencodeuint in reedsol.c...

CVE-2021-39247

CVE-2021-39247 affects Zint Barcode Generator prior to 2.10.0. The root cause is a one-byte buffer over-read in is_last_single_ascii (code1.c) and rs_encode_uint (reedsol.c). Public details consistently describe this as a buffer over-read without broader context; CVSS metrics from NVD indicate a ...

CVE-2021-39247

Zint Barcode Generator before 2.10.0 has a one-byte buffer over-read, related to islastsingleascii in code1.c, and rsencodeuint in reedsol.c...

CVE-2021-39247

Zint Barcode Generator before 2.10.0 has a one-byte buffer over-read, related to islastsingleascii in code1.c, and rsencodeuint in reedsol.c...

Live555 Streaming Media < 2021.08.04 DoS Vulnerability - Linux

Live555 Streaming Media is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Live555 Streaming Media < 2021.08.04 DoS Vulnerability - Windows

Live555 Streaming Media is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

openSUSE 15 Security Update : python-CairoSVG, python-Pillow (openSUSE-SU-2021:1134-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1134-1 advisory. - Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption...

CVE-2021-38380

Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read. An attacker can leverage this to launch a DoS attack...

Stack overflow

Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read. An attacker can leverage this to launch a DoS attack...

CVE-2021-38380

CVE-2021-38380 affects LIVE555 Media Server libraries (Live555 up to 1.08). The vulnerability arises from mishandling a large number of requests for the same MP3 stream, causing recursion and a stack-based buffer over-read, which can be exploited to launch a DoS. Reports in multiple feeds (NVD, C...

CVE-2021-38380

Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read. An attacker can leverage this to launch a DoS attack...

CVE-2021-38380

Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read. An attacker can leverage this to launch a DoS attack...

CVE-2021-38380

Removed by vendor...

Huawei EulerOS: Security Advisory for libvorbis (EulerOS-SA-2021-2274)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...