WebKit Code Execution

The vulnerability of the Web page rendering module in WebKit of Apple Safari browsers for operating systems macOS, iOS, iPadOS is related to type conversion errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2025-37529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the UDF charset conversion code. For filenames starting with '.' and between 2 and 5 characters long, the code reads uninitialized memory in the outpu...

ROS-20230620-06

Vulnerability of the GENERALNAMEcmp function of OpenSSL library is related to a flaw in the mechanism of data type conversion data type conversion mechanism when processing x400 addresses. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service A...

xml2js Prototype Pollution

The vulnerability of the XML object conversion software using JavaScript’s xml2js is related to uncontrolled changes to the attributes of the prototype object. Exploiting this vulnerability allows a malicious actor to remotely modify the properties of the proto object...

libheif:color_conversion_fuzzer: Heap-buffer-overflow in StreamReader_memory::read

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=4724496578510848 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: colorconversionfuzzer Job Type: libfuzzerasani386libheif Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

Jettison 缓冲区错误漏洞

Jettison is jettison-json open source Jettison is a Java library . Jettison is a Java library that is used to convert XML to JSON with the help of StAX. Jettison 3.3 and earlier versions of a security vulnerability , the vulnerability stems from allowing an attacker to cause a denial of service...

CVE-2023-29346: Incorrect Conversion between Numeric Types

NTFS Elevation of Privilege Vulnerability...

Google Chrome Microsoft Edge Code Execution

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

CVE-2022-33240 Incorrect type conversion or cast in Audio

Memory corruption in Audio due to incorrect type cast during audio use-cases...

Qualcomm Chipsets 代码问题漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an incorrect type conversion during an audio use case, resulting in audio memory corruption...

RedCloth 安全漏洞

RedCloth is a Ruby library from Jason Garber's personal developer. It is used to convert Textile to HTML. A security vulnerability exists in RedCloth v4.0.0, which stems from a Regular Expression Denial of Service ReDoS issue found in the sanitizehtml function, which can be exploited by an attack...

CVE-2023-28162: Incorrect Type Conversion or Cast

While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash. This vulnerability affects Firefox 111, Firefox ESR 102.9, and Thunderbird 102.9...

CVE-2023-33182

CVE-2023-33182 concerns the Nextcloud Contacts app. The provided documents describe handling of unsanitized SVG files that are converted to a JavaScript blob in memory, which the Avatar component cannot render. The lack of sanitization is mentioned, but the sources consistently state that this co...

UBUNTU-CVE-2023-2650

Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact summary: Applications that use OBJobj2txt directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message size limit may experience...

ImageMagick 输入验证错误漏洞

ImageMagick is a set of open-source image processing software from the American company ImageMagick. The software can read, convert, or write images in a variety of formats. A security vulnerability exists in ImageMagick that stems from undefined conversion behavior in some encoders...

Jimbos Protocol Hack: $7.5 Million Lost in Latest DeFi Attack

By Habiba Rashid The attack on Jimbos Protocol exploited a critical vulnerability related to the lack of slippage control on liquidity conversions. This is a post from HackRead.com Read the original post: Jimbos Protocol Hack: $7.5 Million Lost in Latest DeFi Attack...

Firefox ESR Data Type Mixing DoS

The vulnerability of Firefox and Firefox ESR browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created website...

Code injection

An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacker to execute arbitrary code due to an out-of-bound write. Note that this bug is only exploitable in cases where Hermes is used to execute untrusted...

CVE-2023-23556

An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacker to execute arbitrary code due to an out-of-bound write. Note that this bug is only exploitable in cases where Hermes is used to execute untrusted...

CVE-2023-23556

An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacker to execute arbitrary code due to an out-of-bound write. Note that this bug is only exploitable in cases where Hermes is used to execute untrusted...