Buffer Over-read

Description Stack-based Buffer Overflow at index.c:991 Build git clone https://github.com/bfabiszewski/libmobi.git cd libmobi export CFLAGS="-g -O0 -lpthread -fsanitize=address" export CXXFLAGS="-g -O0 -lpthread -fsanitize=address" export LDFLAGS="-fsanitize=address" ./autogen.sh ./configure...

EulerOS 2.0 SP8 : python-pillow (EulerOS-SA-2022-1583)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. CVE-2022-22815 - pathgetbbox in path.c in Pillow befo...

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2022-1549)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : python-pillow (EulerOS-SA-2022-1549)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. CVE-2022-22815 - pathgetbbox in path.c in Pillow befor...

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2022-1583)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:1312-1 Security update for SDL

This update for SDL fixes the following issues: - CVE-2020-14409: Fixed an integer overflow and resultant SDLmemcpy heap corruption in SDLBlitCopy in video/SDLblitcopy.c. bsc1181202 - CVE-2020-14410: Fixed a heap-based buffer over-read in Blit3or4to3or4inversedrgb in video/SDLblitN.c. bsc1181201 ...

SUSE-SU-2022:14943-1 Security update for SDL

This update for SDL fixes the following issues: - CVE-2020-14410: Fixed a heap-based buffer over-read in Blit3or4to3or4inversedrgb in video/SDLblitN.c bsc1181201. - CVE-2019-7637: Fixed a heap-based buffer overflow in SDLFillRect in video/SDLsurface.c bsc1124825. - CVE-2021-33657: Fix a buffer...

SUSE SLED15 / SLES15 Security Update : SDL (SUSE-SU-2022:1273-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1273-1 advisory. - SDL Simple DirectMedia Layer through 2.0.12 has an Integer Overflow and resultant SDLmemcpy heap corruption ...

CVE-2022-29537

gprtpbuilderdohevc in ietf/rtppckmpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box...

CVE-2022-29537

gprtpbuilderdohevc in ietf/rtppckmpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box...

Heap overflow

gprtpbuilderdohevc in ietf/rtppckmpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box...

SUSE-SU-2022:1273-1 Security update for SDL

This update for SDL fixes the following issues: - CVE-2020-14409: Fixed an integer overflow and resultant SDLmemcpy heap corruption in SDLBlitCopy in video/SDLblitcopy.c. bsc1181202 - CVE-2020-14410: Fixed a heap-based buffer over-read in Blit3or4to3or4inversedrgb in video/SDLblitN.c. bsc1181201 ...

CVE-2022-29537

GPAC 2.0.0 contains a heap-based buffer over-read in gp_rtp_builder_do_hevc (ietf/rtp_pck_mpeg4.c); demonstrated by MP4Box. Debian advisory DSA-5411-1 fixes this issue for GPAC, upgrading to gpac 1.0.1+dfsg1-4+deb11u2 for Bullseye. Other connected sources reference GPAC-related CVEs, including CV...

CVE-2022-29537

gprtpbuilderdohevc in ietf/rtppckmpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box...

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2022-1514)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-29537

gprtpbuilderdohevc in ietf/rtppckmpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box...

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2022-1495)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP10 : python-pillow (EulerOS-SA-2022-1495)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. CVE-2022-22815 - pathgetbbox in path.c in Pillow befor...

CVE-2022-29537

Removed by vendor...

EulerOS 2.0 SP10 : python-pillow (EulerOS-SA-2022-1514)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. CVE-2022-22815 - pathgetbbox in path.c in Pillow befor...