6859 matches found
CVE-2018-9351
In ih264efmtconv420pto420sp of ih264efmtconv.c there is a possible out of bound read due to missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation...
Conversion of a wide string to a local string that leads to a heap of out-of-bound write
...
Google Android security vulnerabilities
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an out-of-bounds read vulnerability due to a lack of bounds checking in the ih264efmtconv420pto420sp function in the ih264efmtconv.c file, which can be exploited by an attacker to cause a denial ...
Deserialization of Untrusted Data
Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Deserialization of Untrusted Data through the parsing of model files, due to the lack of proper validation of user-supplied data. This is only exploitab...
Deserialization of Untrusted Data
Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Deserialization of Untrusted Data through the handling of model files, due to the lack of proper validation of user-supplied data. This is only...
PT-2026-60939
Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 2.1.0 Description A denial of service issue exists in role conversion. Privileged owner users can define users with nonexistent roles, which allows an attacker to trigger an uncaught panic—a critical error that caus...
PT-2024-40343 · Surrealdb · Surrealdb
Name of the Vulnerable Software and Affected Versions: SurrealDB versions prior to 2.1.0 Description: The issue arises from the conversion of Ident values to the Role enum, which expects only specific values owner, editor, and viewer. If a nonexistent role is used, it would result in a panic,...
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict.
...
[SECURITY] Fedora 41 Update: ghostscript-10.03.1-4.fc41
This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...
[SECURITY] Fedora 40 Update: ghostscript-10.02.1-13.fc40
This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...
Foxit PDF Reader PDF File Editing Code Execution
The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to data conversion errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a...
Mageia: Security Advisory (MGASA-2024-0364)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
freerdp: out-of-bounds read
A flaw was found in FreeRDP-based clients. Affected versions of FreeRDP are vulnerable to an out-of-bounds read. This issue occurs when the WCHAR string is read with twice the size it has and converted to UTF-8, base64 decoded. The string is only used to compare against the redirection server...
PT-2024-9435
Name of the Vulnerable Software and Affected Versions: .NET and Visual Studio affected versions not specified Description: The issue is related to errors in data type conversion in Microsoft Visual Studio and the .NET platform. Exploitation of this issue may allow a remote attacker to execute...
AZL-53076 CVE-2024-52531 affecting package libsoup for versions less than 3.0.4-2
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soupheaderparseparamliststrict. There is a plausible way to reach this remotely via soupmessageheadersgetcontenttype e.g., an application may want to retrieve the content type of a request or...
DEBIAN-CVE-2024-52531
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soupheaderparseparamliststrict. There is a plausible way to reach this remotely via soupmessageheadersgetcontenttype e.g., an application may want to retrieve the content type of a request or...
CVE-2024-52531
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soupheaderparseparamliststrict. There is a plausible way to reach this remotely via soupmessageheadersgetcontenttype e.g., an application may want to retrieve the content type of a request or...
CVE-2024-52531
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soupheaderparseparamliststrict. There is a plausible way to reach this remotely via soupmessageheadersgetcontenttype e.g., an application may want to retrieve the content type of a request or...
CVE-2024-10676
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wojciechborowicz Conversion Helper conversion-helper allows Reflected XSS.This issue affects Conversion Helper: from n/a through = 1.12...
CVE-2024-10676 WordPress Conversion Helper plugin <= 1.12 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wojciechborowicz Conversion Helper conversion-helper allows Reflected XSS.This issue affects Conversion Helper: from n/a through = 1.12...