12369 matches found
CVE-2020-18778
In Libav 12.3, there is a heap-based buffer over-read in vc1decodepmbintfi in vc1block.c that allows an attacker to cause denial-of-service via a crafted file...
CVE-2020-18778
In Libav 12.3, there is a heap-based buffer over-read in vc1decodepmbintfi in vc1block.c that allows an attacker to cause denial-of-service via a crafted file...
CVE-2020-18778
CVE-2020-18778 describes a heap-based buffer over-read in Libav 12.3, specifically in vc1_decode_p_mb_intfi of vc1_block.c. This flaw can allow a denial-of-service when processing a crafted VC-1 file. The available sources consistently identify the affected component and the nature of the vulnera...
CVE-2020-18775
In Libav 12.3, there is a heap-based buffer over-read in vc1decodebmbintfi in vc1block.c that allows an attacker to cause denial-of-service via a crafted file...
CVE-2020-18775
CVE-2020-18775 affects Libav 12.3: a heap-based buffer over-read in vc1_decode_b_mb_intfi (vc1_block.c) can cause denial-of-service when processing crafted files. All connected sources corroborate the same vulnerable function and impact; no public details on specific exploit paths or patched vers...
CVE-2020-18771
Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmnint.cpp which can result in an information leak...
CVE-2020-18771
Exiv2 0.27.99.0 is affected by a global buffer over-read in Nikon1MakerNote::print0x0088 (nikonmn_int.cpp), enabling information leakage. The CVE is CVE-2020-18771. Connected advisories confirm this vulnerability exists in Exiv2 and have prompted remediation discussions. Affected software: Exiv2 ...
CVE-2020-18771
Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmnint.cpp which can result in an information leak...
CVE-2020-18771
Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmnint.cpp which can result in an information leak...
CVE-2021-39247
Zint Barcode Generator before 2.10.0 has a one-byte buffer over-read, related to islastsingleascii in code1.c, and rsencodeuint in reedsol.c...
CVE-2021-39247
Zint Barcode Generator before 2.10.0 has a one-byte buffer over-read, related to islastsingleascii in code1.c, and rsencodeuint in reedsol.c...
CVE-2021-39247
Zint Barcode Generator before 2.10.0 has a one-byte buffer over-read, related to islastsingleascii in code1.c, and rsencodeuint in reedsol.c...
CVE-2021-39247
CVE-2021-39247 affects Zint Barcode Generator prior to 2.10.0. The root cause is a one-byte buffer over-read in is_last_single_ascii (code1.c) and rs_encode_uint (reedsol.c). Public details consistently describe this as a buffer over-read without broader context; CVSS metrics from NVD indicate a ...
CVE-2021-39247
Zint Barcode Generator before 2.10.0 has a one-byte buffer over-read, related to islastsingleascii in code1.c, and rsencodeuint in reedsol.c...
Live555 Streaming Media < 2021.08.04 DoS Vulnerability - Linux
Live555 Streaming Media is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
Live555 Streaming Media < 2021.08.04 DoS Vulnerability - Windows
Live555 Streaming Media is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
openSUSE 15 Security Update : python-CairoSVG, python-Pillow (openSUSE-SU-2021:1134-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1134-1 advisory. - Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption...
Stack overflow
Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read. An attacker can leverage this to launch a DoS attack...