Lucene search
K

15 matches found

Veracode
Veracode
added 2023/06/18 3:32 a.m.19 views

Out-of-bounds Write

erofs-utils is vulnerable to Out-of-bounds Write. The vulnerability is in the 'erofsreadonedata' function within 'data.c' which allows a malicious attacker to execute arbitrary code with a crafted erofs filesystem image leading to a heap-based buffer overflow...

7.8CVSS7.8AI score0.01392EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2023/06/01 3:15 p.m.8 views

CVE-2023-33552

Heap Buffer Overflow in the erofsreadonedata function at data.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image...

7.8CVSS8.2AI score
Exploits0References3
UbuntuCve
UbuntuCve
added 2023/06/01 3:15 p.m.15 views

CVE-2023-33552

Heap Buffer Overflow in the erofsreadonedata function at data.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image...

7.8CVSS7.5AI score0.01392EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/05/27 2:28 a.m.1 views

SUSE CVE-2023-2898

There is a null-pointer-dereference flaw found in f2fswriteendio in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem...

4.7CVSS6AI score0.0002EPSS
Exploits0References3
NVD
NVD
added 2023/05/26 10:15 p.m.17 views

CVE-2023-2898

There is a null-pointer-dereference flaw found in f2fswriteendio in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem...

4.7CVSS6.1AI score0.0002EPSS
Exploits0References5
Veracode
Veracode
added 2020/10/01 3:51 a.m.27 views

Information Disclosure

libexif is vulnerable to information disclosure.Attacker get the information through an out of bounds read due to a missing bounds check in exifdatasavedataentry function in exif-data.c...

5CVSS2.2AI score0.00165EPSS
Exploits0References8Affected Software1
RedHat Linux
RedHat Linux
added 2020/09/29 8:17 p.m.2 views

libexif: out of bounds read due to a missing bounds check in exif_data_save_data_entry function in exif-data.c

In exifdatasavedataentry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0...

5CVSS7.5AI score0.00165EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2020/06/15 6:24 p.m.24 views

CVE-2020-0198

In exifdataloaddatacontent of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-14642894...

5CVSS7.6AI score0.12017EPSS
Exploits0References3
Prion
Prion
added 2020/06/11 3:15 p.m.18 views

Integer overflow

In exifdataloaddatacontent of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-14642894...

5CVSS7.2AI score0.12017EPSS
Exploits0References6Affected Software5
CVE
CVE
added 2020/06/11 2:43 p.m.226 views

CVE-2020-0198

The CVE-2020-0198 entry concerns the libexif library used on Android-10. The issue is in exif_data_load_data_content of exif-data.c, where an integer overflow can trigger a UBSAN abort, potentially enabling remote denial of service with no additional execution privileges. Exploitation requires us...

7.5CVSS7.6AI score0.12017EPSS
Exploits0References6Affected Software1
Veracode
Veracode
added 2020/06/11 7:19 a.m.28 views

Integer Overflow

libexif.so is vulnerable to integer overflow. It is possible because it does not properly perform the overflowing calculations in exif-data.c when the offset is larger than UINTMAX-2...

7.5CVSS4AI score0.09453EPSS
Exploits0References7Affected Software2
UbuntuCve
UbuntuCve
added 2020/05/14 9:15 p.m.19 views

CVE-2020-0093

In exifdatasavedataentry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0...

5CVSS7AI score0.00165EPSS
Exploits0References3
CVE
CVE
added 2020/05/14 8:10 p.m.365 views

CVE-2020-0093

CVE-2020-0093 is a libexif vulnerability affecting Android 8.x–10, where a missing bounds check in exif_data_save_data_entry can cause an out-of-bounds read, leading to local information disclosure. The issue arises from an insufficient bounds check in exif-data.c; exploit requires user interacti...

5CVSS6AI score0.00165EPSS
Exploits0References5Affected Software1
CNVD
CNVD
added 2017/09/22 12:0 a.m.1 views

libexif Denial of Service Vulnerability

libexif is a library of functions written in C to read and write EXIF meta-information from graphics files. A security vulnerability in the 'exifdatasavedataentry' function in the libexif/exif-data.c file in libexif version 0.6.21 and earlier stems from the program failing to correctly calculate...

9.1CVSS6.7AI score0.00436EPSS
Exploits1References1
Cvelist
Cvelist
added 2007/05/14 9:0 p.m.21 views

CVE-2007-2645

Integer overflow in the exifdataloaddataentry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via crafted EXIF data, involving the 1 doff or 2 s variable...

7.8AI score0.3209EPSS
Exploits1References22
Rows per page
Query Builder