Drawing SDK Type Conversion DoS

The vulnerability of the Drawing SDK, a software development tool for engineering applications, is related to errors during type conversion. Exploiting this vulnerability can allow an attacker to cause service failures...

Using msg.value instead of sharesAmount while depositing Ether through Lido can lead to a loss of funds as stETH is not pegged to ETH with 1:1 ratio

Lines of code Vulnerability details Impact In case stETH is not pegged to ETH with 1:1 ratio, the LybraStETHVault.sol will still store all deposits in ETH value after converting to stETH. Also, the emitted event does not return the received stETH amount sharesAmount, but msg.value twice. This mig...

[H] Users can lose funds if they call depositEtherToMint

Lines of code Vulnerability details Impact Due to only an interface implementation of function submit in Lido contract, users will lose funds due to non-existent implementation. Proof of Concept The comments in the code suggest that when users deposit ETH, it should be directly deposited into the...

Orangescrum cross-site scripting vulnerability (CNVD-2026-02680)

Orangescrum is a project and task management software tool that also provides productivity tools for work organization and team collaboration. Orangescrum cross-site scripting vulnerability, the vulnerability stems from the application does not properly validate the HTML content to be converted t...

CLSA-2023-1688070107 sqlite: Fix of CVE-2020-24736

CVE-2020-24736: internally, remove all references to a Window object that belongs to an expression in an ORDER BY clause if that expression is converted to an alias of a result-set expression...

Multiple vulnerabilities cURL libcurl affect AIX

IBM SECURITY ADVISORY First Issued: Thu Jun 29 09:35:59 CDT 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/curladvisory2.asc Security Bulletin: Multiple vulnerabilities cURL libcurl affect AIX...

CVE-2023-1783

OrangeScrum version 2.0.11 allows an external attacker to remotely obtain AWS instance credentials. This is possible because the application does not properly validate the HTML content to be converted to PDF...

CVE-2023-1783

OrangeScrum 2.0.11 is vulnerable to a flaw in HTML-to-PDF rendering that allows an external attacker to remotely obtain AWS instance credentials. The root cause is improper validation of HTML content during PDF conversion, leading to credentials leakage (impacting confidentiality). The most expli...

Potential risk of using swappedAmount in case of swap error

Lines of code Vulnerability details Impact In case the swap operation failed, the module should continue as is with the erc20 conversion and finish the IBC transfer. This is the relevant part of the code that swallows the error: swappedAmount, err = k.coinswapKeeper.TradeInputForExactOutputctx,...

PT-2023-17241 · Unknown · Orangescrum

Name of the Vulnerable Software and Affected Versions: OrangeScrum version 2.0.11 Description: The issue allows an external attacker to remotely obtain AWS instance credentials. This is possible because the application does not properly validate the HTML content to be converted to PDF...

WebKit Code Execution

The vulnerability of the Web page rendering module in WebKit of Apple Safari browsers for operating systems macOS, iOS, iPadOS is related to type conversion errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2025-37529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the UDF charset conversion code. For filenames starting with '.' and between 2 and 5 characters long, the code reads uninitialized memory in the outpu...

ROS-20230620-06

Vulnerability of the GENERALNAMEcmp function of OpenSSL library is related to a flaw in the mechanism of data type conversion data type conversion mechanism when processing x400 addresses. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service A...

xml2js Prototype Pollution

The vulnerability of the XML object conversion software using JavaScript’s xml2js is related to uncontrolled changes to the attributes of the prototype object. Exploiting this vulnerability allows a malicious actor to remotely modify the properties of the proto object...

libheif:color_conversion_fuzzer: Heap-buffer-overflow in StreamReader_memory::read

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=4724496578510848 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: colorconversionfuzzer Job Type: libfuzzerasani386libheif Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

Jettison buffer error vulnerability

Jettison is jettison-json open source Jettison is a Java library . Jettison is a Java library that is used to convert XML to JSON with the help of StAX. Jettison 3.3 and earlier versions of a security vulnerability , the vulnerability stems from allowing an attacker to cause a denial of service...

CVE-2023-29346: Incorrect Conversion between Numeric Types

NTFS Elevation of Privilege Vulnerability...

Google Chrome Microsoft Edge Code Execution

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

CVE-2022-33240 Incorrect type conversion or cast in Audio

Memory corruption in Audio due to incorrect type cast during audio use-cases...

Qualcomm Chipsets code-related vulnerabilities

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an incorrect type conversion during an audio use case, resulting in audio memory corruption...