ROS-2-2224

2.2224 Multiple vulnerabilities in libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

Google TensorFlow 缓冲区错误漏洞

Google TensorFlow, an end-to-end open source platform for machine learning from Google, Inc. is vulnerable to security flaws that could be exploited by attackers by sending specially crafted illegal parameters to "BoostedTreesSparseCalculateBestFeatureSplit" by sending specially crafted illegal...

Advantech WebAccess/SCADA 缓冲区错误漏洞

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. A buffer overflow vulnerability exists in Advantech WebAccess/SCADA, which arises from the product failing to properly validate data boundaries. An attacker could cause a stack overfl...

Dekart Private Disk Code Issue Vulnerability

Dekart Private Disk is an automated mail processing software from Dekart USA. provides the best AES 256-bit data encryption software for Windows. A code issue vulnerability exists in Dekart Private Disk that originates when a networked system or product performs an operation in memory without...

Prusa Research PrusaSlicer Buffer Error Vulnerability

A buffer error vulnerability exists in Prusa Research PrusaSlicer that originates when a networked system or product performs an operation in memory without properly validating data boundaries, resulting in an incorrect read or write operation being performed to an associated other memory locatio...

Google Android Buffer Error Vulnerability

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android OS suffers from a buffer error vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundaries,...

Foxit Reader and PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-57568)

Reader is a set of PDF document reader software . Foxit Reader is a PDF document reader . V8 is one of the open source JavaScript engine . mPDF is a use of PHP to write for the conversion of HTML into PDF files library . A buffer overflow vulnerability exists in Foxit Reader and PhantomPDF versio...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-35689)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in versions prior to FreeRDP 2.1.2. The vulnerability stems from a networked system or product performing operations in memory without properly validating data...

Frigate Professional 'Find Computer' Local Buffer Overflow Vulnerability

Frigate is a free file management software for Windows only, with basic copy, duplicate, delete files or directories, create directories, change file names and more. Frigate Professional 'Find Computer' suffers from a local buffer overflow vulnerability that originates when a networked system or...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-28990)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundaries, resulting in an...

Out-of-bound Reads

FreeRDP is vulnerable to Out-of-bound Reads. The vulnerability exists because it does not properly handle the updatereadiconinfo data boundary checks, leading to a leakage of amount of client memory 32bit unsigned - 4GB to an intermediate buffer and crashing an application or unauthorized storage...

Out-of-Bound Reads

libfreerdp.so is vulnerable to Out-of-Bound Reads. The vulnerability exists because it does not properly perform the data boundary check of updatereadbitmapdata, leaking the memory to an image buffer reflecting the result on screen as colour...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-29362)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundaries, resulting in an...

Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2021-46569)

NETGEAR D3600 and others are products of NETGEAR, Inc.NETGEAR D3600 is a wireless modem.NETGEAR D6100 is a wireless modem.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-46357)

NETGEAR D7800 and others are products of NETGEAR Corporation.NETGEAR D7800 is a wireless modem.NETGEAR EX2700 is a wireless network signal extender.NETGEAR R6100 is a wireless router.NETGEAR D7800 is a wireless modem.NETGEAR EX2700 is a wireless network signal extender.NETGEAR EX2700 is a wireles...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2020-25838)

NETGEAR R6700 and others are products of NETGEAR, Inc.NETGEAR R6700 is a wireless router.NETGEAR D6200 is a wireless modem.NETGEAR R6800 is a wireless router.NETGEAR R6800 is a wireless router. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability originates when ...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2020-30762)

The NETGEAR GS105E and others are a switch from NETGEAR. A buffer overflow vulnerability exists in a number of NETGEAR products. The vulnerability originates when a network system or product performs an operation in memory without properly validating the data boundaries, resulting in an incorrect...

Multiple Apple Products libxml2 Component Buffer Overflow Vulnerability

Apple iOS is an operating system for mobile devices. apple watchOS is an operating system for smartwatches. apple iPadOS is an operating system for iPad tablets. libxml2 is one of the XML document parsing libraries. A buffer overflow vulnerability exists in the libxml2 component of multiple Apple...

NetHack Buffer Overflow Vulnerability (CNVD-2020-14203)

NetHack is a role-playing single-player game. A security vulnerability exists in NetHack. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write operations being performed to...

NetHack Buffer Overflow Vulnerability (CNVD-2020-14201)

NetHack is a role-playing single-player game. A security vulnerability exists in NetHack. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write operations being performed to...