The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s decoding function allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s decoding function is related to the lack of a mechanism for converting data types. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to gain unauthorized access to protected information.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created web page...

Ruby -- Buffer overrun in String-to-Float conversion

piao reports: Due to a bug in an internal function that converts a String to a Float, some convertion methods like KernelFloat and Stringtof could cause buffer over-read. A typical consequence is a process termination due to segmentation fault, but in a limited circumstances, it may be exploitabl...

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves a pointer manipulation issue, which allows an attacker to cause a service failure.

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude is related to the handling of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the put_font function in the genpict2e.c component of the Fig2dev file conversion utility, related to copying buffers without checking the input data, allows a malicious actor to cause service failures.

The vulnerability of the putfont function in the genpict2e.c component of the Fig2dev file conversion utility is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service interruptions by converting xfig files into pict2e...

The vulnerability of the Rust stack generator library “Generator-rs” lies in improper type conversion, which allows attackers to trigger a service failure.

The vulnerability of the Rust generator library, Generator-rs, is related to the lack of restrictions on the use of types that are not of the Send type. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability in the `read_objects` function of the `read.c` component of the .fig Fig2dev file conversion utility allows a attacker to cause a service failure.

The vulnerability of the readobjects function in the read.c component of the .fig conversion utility Fig2dev involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

The vulnerability of microprogramming software in embedded Qualcomm Android operating systems, related to data type conversion errors, allows attackers to escalate their privileges.

The vulnerability of microprogramming software in embedded Qualcomm Android operating systems is related to errors in data type conversion during the verification of file hash segments. Exploiting this vulnerability can allow attackers to enhance their privileges using a specially created malicio...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

The vulnerability of the Node Set-value module, related to type conversion errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Node Set-value module is related to type conversion errors. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Node Object-path module, related to type conversion errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Node Object-path module is related to errors in data type conversion. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the genptk_text component of the .fig Fig2dev file conversion utility allows a attacker to cause a service failure.

The vulnerability of the genptktext component of the .fig Fig2dev file conversion utility is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure by converting the .fig file into a .ptk format...

The vulnerability of the HDLR decoder in the MPEG-4 multimedia platform GPAC function decoding process allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the HDLR decoder in the MPEG-4 multimedia platform GPAC decoding function is related to the lack of a mechanism for data type conversion. Exploiting this vulnerability allows an attacker operating remotely to gain access to confidential data, compromise its integrity, and cau...

The vulnerability of the `shade_or_tint_name_after_declare_color` function in the `genpstricks.c` component, a utility for converting .fig files with the .fig2dev extension, allows a malicious actor to cause a service failure.

The vulnerability of the shadeortintnameafterdeclarecolor function in the genpstricks.c component, a utility for converting .fig files in the Fig2dev format, involves copying buffers without checking input data. Exploiting this vulnerability allows an attacker to cause service failure by converti...

多款Qualcomm产品代码问题漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuitry including primarily semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. A code issue vulnerability exists in multiple Qualcom...

The vulnerability of the bezier_spline function in the genepic.c utility for converting .fig files (Fig2dev), which allows a hacker to cause a service failure.

The vulnerability of the bezierspline function in the genepic.c utility for converting .fig files in Fig2dev is related to writing outside the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the genmp_writefontmacro_latex function in the genmp.c component of the Fig2dev file conversion utility allows a hacker to cause a service failure.

The vulnerability of the genmpwritefontmacrolatex function in the genmp.c component of the xfig conversion utility for .fig files in Fig2dev relates to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure by converting...

LenderPool.terminate mix calculation between shares and tokens, resulting in incorrect amount of shares to be withdrawn from savings account

Lines of code Vulnerability details Impact While calculating the amount of shares to withdraw in LenderPool.terminate, principalWithdrawable which is amount of tokens is added to totalInterestInShares, and then passed to SAVINGSACCOUNT.withdrawShares. If tokens : shares are not 1 : 1, which is th...

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers is related to type conversion errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

[SECURITY] Fedora 34 Update: libcaca-0.99-0.59.beta20.fc34

libcaca is the Colour AsCii Art library. It provides high level functions for color text drawing, simple primitives for line, polygon and ellipse drawing, as well as powerful image to text conversion routines...