PT-2024-11431

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to a NULL pointer dereference in the Linux kernel when completing IO. The issue arises when dm io dec pending calls end io acct first, followed by decrementi...

vlc:vlc-demux-dec-libfuzzer: Heap-buffer-overflow in Decode

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6684421319688192 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer Job Type: libfuzzerasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 3 Crash Address:...

PT-2021-16686

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.3.02.61 Description: A possible buffer overflow vulnerability in the maetd dec slice function of the libSPenBase library allows arbitrary code execution. Recommendations: For versions prior to 4.3.02.61, upda...

Libsixel has unspecified vulnerabilities

libsixel is a package that provides an encoding/decoding implementation for DEC SIXEL graphics and other converter programs. libsixel has an unspecified vulnerability that could be exploited by an attacker to cause a denial of service DOS via a specially crafted PNG file...

Libsixel Stack Buffer Overflow Vulnerability

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. libsixel suffers from a stack buffer overflow vulnerability, for which no details of the vulnerability are currently available...

vlc:vlc-demux-dec-libfuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5711451252195328 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer Job Type: libfuzzerubsanvlc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x036c000d000b Crash State: NULL Sanitizer: undefined UBSAN...

libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c

A flaw was found in libwebp. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c

A flaw was found in libwebp. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

vlc:vlc-demux-dec-libfuzzer: Crash in find_es_header

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6739167890505728 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer Job Type: libfuzzerubsanvlc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000323051c Crash...

vlc:vlc-demux-dec-libfuzzer: Heap-buffer-overflow in ParseRLE

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=5104016825647104 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x61c00001e7a0 Cra...

[SECURITY] Fedora 33 Update: xterm-366-1.fc33

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly...

Security Bulletin: Vulnerabilities have been addressed in IBM Cloud Pak System (Dec 2020)

Summary Multiple vulnerabilities have been identified and addressed in IBM Cloud Pak System. Vulnerability Details CVEID: CVE-2020-4928 DESCRIPTION: IBM Cloud Pak System could allow a local privileged attacker to upload arbitrary files. By intercepting the request and modifying the file extention...

h1-ctf: Writeup Submission

The Write-Up will be published within the next hours latest till Dec. 31st 12:00 PST under https://blogs.tippexs.io User: h4ck4r0ne Pass: s4nt4sucks Let me know if I need to submit anything else. I have started crafting an PDF but it become that huge that I have decided to create a complete new...

SyncBreeze 10.0.28 - 'login' Denial of Service (Poc)

Exploit Title: SyncBreeze 10.0.28 - 'login' Denial of Service Poc Data: 18-Dec-2020 Exploit Author: Ahmed Elkhressy Vendor Homepage: http://www.syncbreeze.com Software Link: http://www.syncbreeze.com/setups/syncbreezeentsetupv10.0.28.exe Version: 10.0.28 Tested on: Windows 7, Windows 10...

About the security content of watchOS 6.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Description of the security update for PowerPoint 2016: December 8, 2020

None None...

kernel: information leak bug caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c

An information leak flaw was found in the Linux kernel's USB digital video device driver. An attacker with a malicious USB device presenting itself as a 'Technotrend/Hauppauge USB DEC' device is able to issue commands to this specific device and leak kernel internal memory information. The highes...

PT-2020-21960

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash involves the functions le to u32, le to i32, and bcf dec typed int1 safe. No information i...

OSV-2020-1565 Heap-buffer-overflow in allocate_field

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24586 Crash type: Heap-buffer-overflow WRITE 8 Crash state: allocatefield pbdecstring decodebasicfield...

PT-2020-21904

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow WRITE 8 crash type. The crash state involves functions such as allocate field, pb dec string, and decode bas...