kimageformats:kimgio_heif_fuzzer: Use-of-uninitialized-value in clip_int_u8

Detailed Report: https://oss-fuzz.com/testcase?key=6560387936944128 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clipintu8...

Out-of-Bounds Access

openjpeg is vulnerable to out-of-bounds write. An attacker is able to inject a malicious input during conversion and encoding, causing an out-of-bounds write...

mdbtools:fuzz_mdb: Crash in decompressed_to_utf8_with_iconv

Project: https://github.com/mdbtools/mdbtools.git Detailed Report: https://oss-fuzz.com/testcase?key=4676536771936256 Project: mdbtools Fuzzing Engine: libFuzzer Fuzz Target: fuzzmdb Job Type: libfuzzerubsanmdbtools Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fea83d78000 Crash...

ansi_up cross-site scripting vulnerability

The npm package ansiup converts ANSI escape codes into HTML. In ansiup v4, ANSI escape codes can be used to create HTML hyperlinks. Due to insufficient URL sanitization, this feature is affected by a cross-site scripting XSS vulnerability. This issue is fixed in v5.0.0...

Foxit Reader GetFieldValue Code Execution

The vulnerability of the GetFieldValue function implementation in programs for displaying text in Foxit Reader and editing PDF files in Foxit PhantomPDF is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Foxit Reader AddWatermark Code Execution

The vulnerability of the “AddWatermark” command in the Foxit Reader text viewer and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Foxit Reader Export Code Execution

The vulnerability of the “Export” command in the Foxit Reader text viewer and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Foxit Reader OCRAndExportToExcel Code Execution

The vulnerability of the OCRAndExportToExcel implementation in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing programs is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Foxit Reader RotatePage Code Execution

The vulnerability of the RotatePage function in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing software lies in data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

UBUNTU-CVE-2021-3377

The npm package ansiup converts ANSI escape codes into HTML. In ansiup v4, ANSI escape codes can be used to create HTML hyperlinks. Due to insufficient URL sanitization, this feature is affected by a cross-site scripting XSS vulnerability. This issue is fixed in v5.0.0...

CVE-2021-25345

Graphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release 1 results in kernel panic due to unsupported format...

CVE-2021-25345

Graphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release 1 results in kernel panic due to unsupported format...

Format string

Graphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release 1 results in kernel panic due to unsupported format...

CVE-2021-26988

Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerability which could allow unauthorized tenant users to discover information related to converting a 7-Mode directory to Cluster-mode such as Storage Virtual Machine SVM names, volume names,...

CVE-2021-26988

Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerability which could allow unauthorized tenant users to discover information related to converting a 7-Mode directory to Cluster-mode such as Storage Virtual Machine SVM names, volume names,...

JDK: Stack-based buffer overflow when converting from UTF-8 characters to platform encoding

In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding...

hwcomposer 安全漏洞

Samsung hwcomposer is a mobile application from Samsung South Korea. It provides video conversion format functionality. A security vulnerability exists in hwcomposer prior to SMR Mar-2021 Release 1, which stems from a graphics format mismatch when hwcomposer converts video formats...

CVE-2021-25345: Undefined Security Weakness

Graphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release 1 results in kernel panic due to unsupported format...

Qualcomm Component Buffer Overflow Vulnerability

A Qualcomm component is a component of Qualcomm Incorporated Qualcom. Provides components that are intrinsic to Qualcomm devices. A buffer overflow vulnerability exists in the Qualcomm component that originates from a buffer overflow that occurs when attempting to convert an ASCII string to a...

ONLYOFFICE Document Server File Extension Handling Vulnerability (CNVD-2021-17247)

ONLYOFFICE Document Server is a free collaborative online office suite that includes viewers and editors for text, spreadsheets and presentations. A file extension handling vulnerability exists in the ONLYOFFICE DocumentServer core module, which can be exploited by an attacker to remotely execute...