316 matches found
SafeTrans: LLM-Assisted Transpilation from C to Rust
Rust is a strong contender for a memory-safe alternative to C as a "systems" programming language, but porting the vast amount of existing C code to Rust is a daunting task. In this paper, we evaluate the potential of large language models LLMs to automate the transpilation of C code to idiomatic...
C2RUST-BENCH: a Minimized, Representative Dataset for C-To-Rust Transpilation Evaluation
Despite the effort in vulnerability detection over the last two decades, memory safety vulnerabilities continue to be a critical problem. Recent reports suggest that the key solution is to migrate to memory-safe languages. To this end, C-to-Rust transpilation becomes popular to resolve...
CVE-2025-29088
In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3dbconfig in the C-language API can cause a denial of service application crash. An sznBig multiplication is not cast to a 64-bit integer, and consequently some memory allocations may be incorrect...
RLSA-2024:9181 Moderate: jose security update
Jose is a C-language implementation of the Javascript Object Signing and Encryption standards. The jose package is a dependency of the clevis and tang packages, together providing Network Bound Disk Encryption NBDE in Rocky Linux. Security Fixes: jose: resource exhaustion CVE-2024-28176 jose:...
[SECURITY] Fedora 40 Update: gnutls-3.8.9-1.fc40
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...
The vulnerability of the EditorConfig core library in the C programming language, related to buffer overflow in the stack, allows a malicious actor to trigger a service failure.
The vulnerability of the EditorConfig core library in the C programming language is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2024-54137
Removed by vendor...
CVE-2024-54137 liboqs has a correctness error in HQC decapsulation
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A correctness error has been identified in the reference implementation of the HQC key encapsulation mechanism. Due to an indexing error, part of the secret key is incorrectly treat...
Moderate: Red Hat Security Advisory: jose security update
An update for jose is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
VMIR 安全漏洞
VMIR is a standalone library written in C by the individual developer Andreas Smas. A security vulnerability exists in VMIR version e8117, which stems from a heap buffer overflow in the wasmparsesectionfunctions function...
VMIR 安全漏洞
VMIR is a standalone library written in C by the individual developer Andreas Smas. A security vulnerability exists in VMIR version e8117, which stems from a segmentation violation in the functionprepareparse function...
VMIR 安全漏洞
VMIR is a standalone library written in C by the individual developer Andreas Smas. A security vulnerability exists in VMIR version e8117, which stems from a heap buffer overflow in the wasmcall function...
The vulnerabilities of PHP and C database management systems like MongoDB allow attackers to gain increased privileges.
The vulnerabilities of PHP and C language drivers in the MongoDB database management system are related to lack of access control mechanisms. Exploiting these vulnerabilities can allow attackers to enhance their privileges...
Azure C SDK Integer Wraparound Vulnerability
...
PT-2024-28005 · Unknown · The Algorithms
Name of the Vulnerable Software and Affected Versions: The Algorithms - C versions through e5dad3f Description: The issue is related to a segmentation fault caused by deep recursion in the binary insertion sort.c file. This may impact common use cases, such as sorting an array of 50 elements...
Number withdrawn
GNU gdb is a GNU project debugger from the American GNU community. It supports debugging C, C++, Pascal, and FORTRAN programming languages. This CVE number has been withdrawn...
CVE-2024-36405
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A control-flow timing lean has been identified in the reference implementation of the Kyber key encapsulation mechanism when it is compiled with Clang 15-18 for -Os, -O1, and other...
CVE-2024-36405 Control-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other options
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A control-flow timing lean has been identified in the reference implementation of the Kyber key encapsulation mechanism when it is compiled with Clang 15-18 for -Os, -O1, and other...
CVE-2024-36405
CVE-2024-36405 affects the liboqs reference Kyber KEM implementation. A control-flow timing leak arises when the Kyber KEM is compiled with Clang 15–18 under certain options (including -Os and -O1), enabling a local attacker to measure decapsulation timings and recover the entire ML-KEM 512 secre...