PT-2026-71291

Shescape is a simple shell escape library for JavaScript. From 2.1.11 until 2.1.14 and 3.0.1, the flag-protection loop in compose in src/internal/compose.js repeatedly joins and slices flag fragments when flagProtection is enabled, which is the default, making processing quadratic in input size...

PT-2022-7658 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.1 Description: The vulnerability is related to a buffer overflow issue in the vivid component of the Linux kernel. It occurs due to a failure to check boundaries after adjusting the compose height in the V4L...

NULL Pointer Dereference

GhostScript is vulnerable to null pointer dereference. A remote attacker could cause a system hang using the vulnerable composegroupnonknockoutnonblendisolatedallmaskcommon function in base/gxblend.c via a crafted PDF file...