UBUNTU-CVE-2021-20289

A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The...

CVE-2021-20289

A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The...

[SECURITY] Fedora 32 Update: jasper-2.0.26-2.fc32

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

[SECURITY] Fedora 33 Update: jasper-2.0.26-2.fc33

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

Ubuntu 16.04 LTS : OpenJPEG vulnerabilities (USN-4880-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4880-1 advisory. It was discovered that OpenJPEG incorrectly handled certain image data. An attacker could use this issue to cause OpenJPEG to crash, leading to a denial ...

LibTIFF Image Conversion DoS

The vulnerability of the TIFF-to-RGBA tiff2rgba conversion module in the LibTIFF library is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially created TI...

QPDF::resolveObjectsInStream Infinite Loop DoS

The vulnerability of the QPDF::resolveObjectsInStream function in the command-line PDF conversion tool is related to the infinite loop that can occur during execution. Exploiting this vulnerability could allow an attacker to cause service failures...

QPDF PointerHolder Buffer Overflow DoS

The vulnerability of the PointerHolder function in the command-line PDF conversion tool QPDF is related to the infinite execution of a loop. Exploiting this vulnerability could allow an attacker to cause service interruptions...

libqpdf Command Failure

The vulnerability of the libqpdf.a component of the command-line utility for converting PDF documents, QPDF, is related to the infinite execution of a loop. Exploiting this vulnerability could allow an attacker to cause service interruptions...

QPDFTokenizer resolveLiteral DoS

The vulnerability of the QPDFTokenizer::resolveLiteral function in the command-line PDF conversion utility for QPDF documents involves infinite loop execution. Exploiting this vulnerability could allow an attacker to cause service interruptions...

PT-2021-9316

Name of the Vulnerable Software and Affected Versions Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT affect...

CVE-2020-11308: Improper Validation of Array Index

Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

FreeRDP gdi_SelectObject Data Compromise

The vulnerability of the gdiSelectObject component in the FreeRDP remote desktop protocol implementation is related to the lack of a mechanism for data type conversion. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

kimageformats:kimgio_heif_fuzzer: Use-of-uninitialized-value in clip_int_u8

Detailed Report: https://oss-fuzz.com/testcase?key=6560387936944128 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clipintu8...

Out-of-Bounds Access

openjpeg is vulnerable to out-of-bounds write. An attacker is able to inject a malicious input during conversion and encoding, causing an out-of-bounds write...

mdbtools:fuzz_mdb: Crash in decompressed_to_utf8_with_iconv

Project: https://github.com/mdbtools/mdbtools.git Detailed Report: https://oss-fuzz.com/testcase?key=4676536771936256 Project: mdbtools Fuzzing Engine: libFuzzer Fuzz Target: fuzzmdb Job Type: libfuzzerubsanmdbtools Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fea83d78000 Crash...

ansi_up cross-site scripting vulnerability

The npm package ansiup converts ANSI escape codes into HTML. In ansiup v4, ANSI escape codes can be used to create HTML hyperlinks. Due to insufficient URL sanitization, this feature is affected by a cross-site scripting XSS vulnerability. This issue is fixed in v5.0.0...

Foxit Reader AddWatermark Code Execution

The vulnerability of the “AddWatermark” command in the Foxit Reader text viewer and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Foxit Reader Export Code Execution

The vulnerability of the “Export” command in the Foxit Reader text viewer and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Foxit Reader OCRAndExportToExcel Code Execution

The vulnerability of the OCRAndExportToExcel implementation in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing programs is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...