CVE-2022-36141

SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::MethodBody::writeSWF::Writer, SWF::Context...

CVE-2022-35113

SWFTools (commit 772e55a2) contains a heap-buffer overflow in swf_DefineLosslessBitsTagToImage (modules/swfbits.c). The CVE-2022-35113 entry and Red Hat/Ubuntu/Nessus-like sources confirm this vulnerability affects SWFTools; CVSSv3 base 5.5 (MEDIUM) with LOCAL attack vector and user interaction r...

CVE-2022-35110

SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c...

CVE-2022-35109

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via drawstroke at /gfxpoly/stroke.c...

CVE-2022-35109

SWFTools contains a heap-buffer overflow in draw_stroke implemented in /gfxpoly/stroke.c (commit 772e55a2). Affected component: SWFTools; root cause: heap-buffer overflow in drawing strokes. CVSSv3.1 base score 5.5 (Medium) with LOCAL attack vector, user interaction required, and high impact on a...

CVE-2022-35105

SWFTools is affected by a heap-buffer overflow in the /bin/png2swf API (/bin/png2swf+0x552cea) associated with CVE-2022-35105 (commit 772e55a2). The issue is described as a heap-buffer overflow in SWFTools, with CVSSv3.1 metrics indicating Local Access Vector, Low Attack Complexity, No privileges...

CVE-2022-35104

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::reset at /xpdf/Stream.cc...

CVE-2022-35100

SWFTools commit 772e55a2 was discovered to contain a segmentation violation via gfxlinegetbbox at /lib/gfxtools.c...

CVE-2022-35101

SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memset-vec-unaligned-erms.S...

CVE-2022-35010

PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via asaninterceptorsmemintrinsics.cpp...

CVE-2022-36148

fdkaac commit 53fe239 was discovered to contain a floating point exception FPE via wavopen at /src/wavreader.c...

CVE-2022-36148

fdkaac commit 53fe239 was discovered to contain a floating point exception FPE via wavopen at /src/wavreader.c...

CVE-2022-35004

JPEGDEC commit be4843c was discovered to contain a FPE via TIFFSHORT at /src/jpeg.inl...

CVE-2022-34999

JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl...

XPDF 代码问题漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF commit id ffaf11c has a security vulnerability that stems from a segmentation violation contained in DCTStream::getChar in /xpdf/Stream.cc...

SWFMill 缓冲区错误漏洞

SWFMill is a tool for working with Adobe Flash SWF files by Daniel Cassidy, a personal developer in the UK. A security vulnerability exists in SWFMill commit number: 53d7690 that stems from a heap buffer overflow in its SWF::Writer::writeByteunsigned char function...

PT-2022-22821 · Unknown · Jpeg-Quantsmooth

Name of the Vulnerable Software and Affected Versions: jpeg-quantsmooth before commit 8879454 Description: The issue is related to a floating point exception FPE in jpeg-quantsmooth. This exception occurs via the /jpeg-quantsmooth/jpegqs+0x4f5d6c endpoint. Recommendations: For versions before...

PT-2022-22490 · Pngdec · Pngdec

Name of the Vulnerable Software and Affected Versions: PNGDec version prior to the version that includes the fix for the issue in commit 8abf6be Description: A heap buffer overflow issue was discovered in PNGDec via the SaveBMP function at /linux/main.cpp. Recommendations: For versions prior to t...

PT-2022-22484 · Pngdec · Pngdec

Name of the Vulnerable Software and Affected Versions: PNGDec version prior to the version that includes the fix for the issue in commit 8abf6be Description: A heap buffer overflow issue was discovered in PNGDec via the interceptor fwrite.part.57 function at sanitizer common interceptors.inc...

fdkaac 安全漏洞

fdkaac is a command-line front-end for the libfdk-aac encoder by the Japanese individual developer nu774. A security vulnerability exists in fdkaac commit number: 53fe239, which stems from a floating point exception in its wavopen at /src/wavreader.c component...