fdkaac security vulnerabilities

fdkaac is a command-line front-end for the libfdk-aac encoder by the Japanese individual developer nu774. A security vulnerability exists in fdkaac commit number: 53fe239, which stems from a floating point exception in its wavopen at /src/wavreader.c component...

PT-2022-22484 · Pngdec · Pngdec

Name of the Vulnerable Software and Affected Versions: PNGDec version prior to the version that includes the fix for the issue in commit 8abf6be Description: A heap buffer overflow issue was discovered in PNGDec via the interceptor fwrite.part.57 function at sanitizer common interceptors.inc...

PT-2022-22490 · Pngdec · Pngdec

Name of the Vulnerable Software and Affected Versions: PNGDec version prior to the version that includes the fix for the issue in commit 8abf6be Description: A heap buffer overflow issue was discovered in PNGDec via the SaveBMP function at /linux/main.cpp. Recommendations: For versions prior to t...

XPDF code issue vulnerabilities

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF commit id ffaf11c has a security vulnerability that stems from DCTStream::readMCURow in /xpdf/Stream.cc contains a segmentation violation...

SWFMill buffer error vulnerability

SWFMill is a tool for working with Adobe Flash SWF files by Daniel Cassidy, a personal developer in the UK. A security vulnerability exists in SWFMill commit number: 53d7690 that stems from a heap buffer overflow in its SWF::Writer::writeByteunsigned char function...

PT-2022-24303 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A segmentation violation was discovered in XPDF via the Lexer::getObjObject function at /xpdf/Lexer.cc. This issue was identified in XPDF commit ffaf11c. Recommendations: At the moment, there ...

CVE-2022-2819

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211...

CVE-2022-2503

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear...

Possible cross-site scripting vulnerability in libxml after commit 960f0e2.

...

CVE-2022-35928

AES Crypt is a file encryption software for multiple platforms. AES Crypt for Linux built using the source on GitHub and having the version number 3.11 has a vulnerability with respect to reading user-provided passwords and confirmations via command-line prompts. Passwords lengths were not checke...

GSD-2022-1004948 nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred

nfc: nfcmrvl: Fix memory leak in nfcmrvlplaydeferred This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.320 by commit...

GSD-2022-1004944 usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe

usb: gadget: lpc32xxudc: Fix refcount leak in lpc32xxudcprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.320 by commit...

GSD-2022-1004940 dm era: commit metadata in postsuspend after worker stops

dm era: commit metadata in postsuspend after worker stops This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.321 by commit...

GSD-2022-1004939 mm/slub: add missing TID updates on slab deactivation

mm/slub: add missing TID updates on slab deactivation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.323 by commit...

GSD-2022-1004937 xtensa: xtfpga: Fix refcount leak bug in setup

xtensa: xtfpga: Fix refcount leak bug in setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.321 by commit...

GSD-2022-1004936 xtensa: Fix refcount leak bug in time.c

xtensa: Fix refcount leak bug in time.c This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.321 by commit...

GSD-2022-1004933 ARM: cns3xxx: Fix refcount leak in cns3xxx_init

ARM: cns3xxx: Fix refcount leak in cns3xxxinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.321 by commit...

GSD-2022-1004932 powerpc: Enable execve syscall exit tracepoint

powerpc: Enable execve syscall exit tracepoint This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.321 by commit...

GSD-2022-1004931 net: usb: ax88179_178a: Fix packet receiving

net: usb: ax88179178a: Fix packet receiving This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.322 by commit...

GSD-2022-1004930 dm raid: fix KASAN warning in raid5_add_disks

dm raid: fix KASAN warning in raid5adddisks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.322 by commit...