Heap overflow

An issue was discovered in gpac before 1.0.1. The abstboxread function in boxcodeadobe.c has a heap-based buffer over-read...

Heap overflow

An issue was discovered in fastber through v0.4. yy::yylex in asncompiler.hpp has a heap-based buffer over-read...

CVE-2020-23922

An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read...

Heap overflow

An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read...

CVE-2020-23928

An issue was discovered in gpac before 1.0.1. The abstboxread function in boxcodeadobe.c has a heap-based buffer over-read...

CVE-2020-23931

CVE-2020-23931 affects gpac prior to 1.0.1. The vulnerability is a heap-based buffer over-read in the abst_box_read function (box_code_adobe.c), potentially leading to information disclosure or instability. Affected software is GPAC (multimedia framework); root cause is improper bounds checking i...

CVE-2020-23931

An issue was discovered in gpac before 1.0.1. The abstboxread function in boxcodeadobe.c has a heap-based buffer over-read...

CVE-2020-23921

CVE-2020-23921 concerns the fast_ber library. The vulnerability is a heap-based buffer over-read in the function yy::yylex() located in asn_compiler.hpp, affecting fast_ber versions prior to v0.5. The connected sources confirm the flaw but do not provide exploit details or in‑the‑wild activity. I...

CVE-2020-23922

CVE-2020-23922 is a vulnerability in giflib up to version 5.1.4 where the function DumpScreen2RGB in gif2rgb.c performs a heap-based buffer over-read . Connected sources (OSV, CNVD, NVD, ALAS advisories) confirm the issue and its impact attribution to giflib 5.1.4 and earlier. The vulnerability i...

CVE-2020-23921

An issue was discovered in fastber through v0.4. yy::yylex in asncompiler.hpp has a heap-based buffer over-read...

CVE-2020-23915

An issue was discovered in cpp-peglib through v0.1.12. peg::resolveescapesequence in peglib.h has a heap-based buffer over-read...

CVE-2020-23928

An issue was discovered in gpac before 1.0.1. The abstboxread function in boxcodeadobe.c has a heap-based buffer over-read...

CVE-2020-23915

CVE-2020-23915 affects the cpp-peglib library (header-only PEG parser) and is caused by a heap-based buffer over-read in peg::resolve_escape_sequence() implemented in peglib.h, impacting v0.1.12 and earlier. The vulnerability is documented across multiple connected sources (NVD and OSV entries) w...

PT-2021-10985 · Fast Ber · Fast Ber

Name of the Vulnerable Software and Affected Versions: fast ber versions prior to v0.5 Description: An issue was discovered in the yy::yylex function located in asn compiler.hpp, which has a heap-based buffer over-read. Recommendations: For versions prior to v0.5, update to version v0.5 or later ...

Out-of-bounds Read

A heap-based buffer over-read was discovered in cpp-peglib's peg::resolveescapesequence in peglib.h...

PT-2021-10986

Name of the Vulnerable Software and Affected Versions: giflib versions 5.1.4 and earlier Description: An issue was discovered in the giflib library, where the DumpScreen2RGB function in gif2rgb.c has a heap-based buffer over-read. Recommendations: For giflib versions 5.1.4 and earlier, update to ...

Out-of-bounds Read

An issue was discovered in giflib DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read...

SUSE: Security Advisory (SUSE-SU-2020:2807-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:2440-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:2785-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...