EV Video Converter Win has dll hijacking vulnerability

EV Video Converter is a video conversion tool. EV Video Converter Win suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

PT-2021-16837

Name of the Vulnerable Software and Affected Versions basic dsp matrix crate versions prior to 0.9.2 Description An issue was discovered in the basic dsp matrix crate where a double drop can be performed when a TransformContent panic occurs. This happens because affected versions of the crate did...

libheif:color-conversion-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6466293349875712 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: color-conversion-fuzzer Job Type: libfuzzerubsanlibheif Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00b95a5a5575 Crash State: NULL Sanitizer: undefined UBS...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. The vulnerability exists through a flaw in src/lib/openjp2/pi.c through openjpeg's conversion/encoding functionality that causes an out-of-bounds read...

CVE-2020-13545

An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer th...

CVE-2020-13545

An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer th...

CVE-2020-13545

CVE-2020-13545 affects SoftMaker Office TextMaker 2021. The TALOS analysis details a signed/unsigned conversion issue in TextMaker’s document parsing that can cause heap-based memory corruption when loading a crafted TextMaker Document (.tmd). The root cause involves miscalculation of a length us...

CVE-2020-13545: Unsigned to Signed Conversion Error

An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer th...

CVE-2020-27845

There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability...

DEBIAN-CVE-2020-27845

There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability...

ALPINE-CVE-2020-27844

A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as...

AZL-44712 CVE-2020-27845 affecting package openjpeg2 for versions less than 2.3.1-12

There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability...

UBUNTU-CVE-2020-27844

A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as...

CVE-2020-27843

A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability...

SoftMaker Office TextMaker Document Record 0x003f integer conversion vulnerability

Summary An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this...

CVE-2020-27845: Out-of-bounds Read

There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability...

CVE-2020-27843: Out-of-bounds Read

A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability...

Fantastic PPT to Long Chart Software windows version has dll hijacking vulnerability

Magic PPT to Long Picture Software is a software to convert PPT files to long strip pictures. Magical PPT to Long Picture Software for windows has a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

ffmpeg:ffmpeg_dem_W64_fuzzer: Heap-buffer-overflow in av_strdup

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5037853281222656 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemW64fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

wolfssl:cryptofuzz-sp-math-all: Heap-buffer-overflow in sp_tohex

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6331649312817152 Project: wolfssl Fuzzing Engine: honggfuzz Fuzz Target: cryptofuzz-sp-math-all Job Type: honggfuzzasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...