2323 matches found
PT-2022-12394 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC version 1.1.0 Description: An issue was discovered in GPAC, where an invalid memory address dereference occurs via the function shift chunk offsets.isra. Recommendations: For GPAC version 1.1.0, at the moment, there is no information abo...
GHSA-P62J-HRXM-XCXF Book page text, count, and author/title length is not limited in PocketMine-MP
Impact Players can fill book pages with as many characters as they like; the server does not check this. In addition, the maximum of 50 pages is also not enforced, meaning that players can create "book bombs". This causes a variety of problems: - Oversized NBT on the wire costing excess bandwidth...
CVE-2021-46039
A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shiftchunkoffsets.part function, which causes a Denial of Service context-dependent...
PT-2022-12520 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A Pointer Dereference issue exists via the shift chunk offsets.part function, which causes a Denial of Service. This issue is context-dependent. Recommendations: For GPAC version 1.0.1, as a temporary workaroun...
CVE-2021-46038
A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlinkchunk.isra, which causes a Denial of Service context-dependent...
UBUNTU-CVE-2021-46038
A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlinkchunk.isra, which causes a Denial of Service context-dependent...
DEBIAN-CVE-2021-45833
A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 via the H5Dcreatechunkfilemaphyper function in /hdf5/src/H5Dchunk.c, which causes a Denial of Service context-dependent...
UBUNTU-CVE-2021-45833
A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 via the H5Dcreatechunkfilemaphyper function in /hdf5/src/H5Dchunk.c, which causes a Denial of Service context-dependent...
GPAC 代码问题漏洞
GPAC is an open source multimedia framework. GPAC has a denial of service vulnerability in version 1.0.1, which stems from the existence of a pointer dereference in unlinkchunk.isra, which can be exploited by attackers to perform denial of service attacks...
PT-2022-7542 · Hdf5 +3 · Hdf5 +3
Name of the Vulnerable Software and Affected Versions: HDF5 version 1.13.1-1 Description: A Stack-based Buffer Overflow issue exists in the H5D create chunk file map hyper function in /hdf5/src/H5Dchunk.c, which can cause a Denial of Service. The vulnerability is related to writing beyond memory...
OSV-2021-1772 UNKNOWN READ in chunk_free_object
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42998 Crash type: UNKNOWN READ Crash state: chunkfreeobject gsfontdirfinalize chunkfreeobject...
OSV-2021-1754 UNKNOWN READ in insert_free_size
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42917 Crash type: UNKNOWN READ Crash state: insertfreesize chunkfreeobject pdfipscriptstackfinit...
ROS-2-2215
2.2215 Multiple vulnerabilities in libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...
Integer overflow in the bundled Brotli C library
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. If one cannot update the C library, its...
Integer overflow in the bundled Brotli C library
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. An updated version of brotli-sys has not...
RUSTSEC-2021-0132 Integer overflow in the bundled Brotli C library
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. If one cannot update the C library, its...
RUSTSEC-2021-0131 Integer overflow in the bundled Brotli C library
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. An updated version of brotli-sys has not...
OSV-2021-1708 UNKNOWN READ in chunk_free_object
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42491 Crash type: UNKNOWN READ Crash state: chunkfreeobject pdficlosefile pdfidereference...
llhttp: HTTP Request Smuggling when parsing the body of chunked requests
An HTTP Request Smuggling HRS vulnerability was found in the llhttp library, used by Node.JS. During the parsing of chunked messages, the chunk size parameter was not validated properly. In situations where HTTP conversations are being proxied such as proxy, reverse-proxy, load-balancer, an...