1320 matches found
Bosch IP cameras Information Disclosure Vulnerability
Bosch IP cameras are network cameras from Bosch, Germany. An information disclosure vulnerability exists in Bosch IP cameras that originates from allowing an unauthenticated attacker to retrieve information about the device itself and the device's network settings. The following products and...
Updated audiofile packages fix a security vulnerability
2 patches are added to audiofile source to correct a vulnerability. In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file. CVE-2019-13147...
CVE-2023-46603
In International Color Consortium DemoIccMAX 79ecb74, there is an out-of-bounds read in the CIccPRMG::GetChroma function in IccProfLib/IccPrmg.cpp in libSampleICC.a...
Amazon Linux 2023 : poppler, poppler-cpp, poppler-cpp-devel (ALAS2023-2023-371)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-371 advisory. 2024-07-17: CVE-2022-27337 was added to this advisory. A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service DoS via a crafted PDF file...
CVE-2023-39070
An issue in Cppcheck 2.12 dev allows a local attacker to execute arbitrary code via the removeContradiction parameter in token.cpp:1934...
Amazon Linux 2023 : poppler, poppler-cpp, poppler-cpp-devel (ALAS2023-2023-340)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-340 advisory. An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to denial of service because PDFDoc::replacePageDict in PDFDoc.cc lacks a stream check before saving an...
CVE-2023-36481
An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W920. Improper handling of PPP length parameter inconsistency can cause an infinite loop...
DEBIAN-CVE-2021-40266
FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference...
CVE-2021-40266
FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference...
DEBIAN-CVE-2020-18831
Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS in IW44Image.cpp, by triggering a divide by zero error. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other...
CVE-2022-47069
p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur...
Stack overflow
async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in ReceiveFrom and Receive in udpsocket.hpp when processing malformed UDP packets...
Amazon Linux 2023 : poppler, poppler-cpp, poppler-cpp-devel (ALAS2023-2023-289)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-289 advisory. Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder JBIG2Stream::readTextRegionSeg in JBIGStream.cc. Processing a specially crafted PDF file or JBIG2 image could lea...
CVE-2023-40296
async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in ReceiveFrom and Receive in udpsocket.hpp when processing malformed UDP packets...
CVE-2023-40296: Out-of-bounds Write
async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in ReceiveFrom and Receive in udpsocket.hpp when processing malformed UDP packets...
CVE-2023-40296
CVE-2023-40296 concerns the async-sockets-cpp library (versions ≤ 0.3.1), which contains a stack-based buffer overflow in the udpsocket.hpp file’s ReceiveFrom and Receive when handling malformed UDP packets. The Red Hat entry and multiple sources confirm the vulnerability details and affected com...
async-sockets-cpp buffer error vulnerability
async-sockets-cpp is a simple thread-based asynchronous TCP and UDP Socket class in C++. A security vulnerability exists in async-sockets-cpp version 0.3.1 and earlier, which stems from a buffer overflow vulnerability in ReceiveFrom and Receive when processing malformed UDP packets...