6 matches found
libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing
A flaw was found in libXi. An out-of-bounds read vulnerability occurs during the parsing of X Input Extension XI2 device class data. A malicious X server can exploit this vulnerability by sending specially crafted class responses to a connected client application. This causes the client to read...
PT-2026-97977
Name of the Vulnerable Software and Affected Versions libXi versions prior to 1.8.4 Description An out-of-bounds read occurs during XI2 class parsing within the size classes and copy classes functions. This flaw allows malicious servers to cause the X client to crash. Recommendations Update libXi...
CLSA-2025-1759222758 ruby: Fix of 4 CVEs
CVE-2016-2337: Fix type confusion in canceleval Ruby's TclTkIp class method to prevent arbitrary code execution - CVE-2017-9224: Fix stack out-of-bounds read in matchat during regular expression searching - CVE-2017-9227: Fix stack out-of-bounds read in mbcenclen and invalid pointer dereference...
joni:RegexMatcherFuzzer: Security exception in org.joni.Parser.parseCharClass
Project: https://github.com/jruby/joni.git Detailed Report: https://oss-fuzz.com/testcase?key=6586455457857536 Project: joni Fuzzing Engine: libFuzzer Fuzz Target: RegexMatcherFuzzer Job Type: libfuzzerasanjoni Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
OESA-2022-1667 nodejs-hawk security update
Hawk is an HTTP authentication scheme using a message authentication code MAC algorithm to provide partial HTTP request cryptographic verification. Security Fixes: Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic...