Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 8:32 a.m.3 views

CVE-2019-2252

Classic buffer overflow vulnerability while playing the specific video whose Decode picture buffer size is more than 16 in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

10CVSS8AI score0.01204EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:59 a.m.4 views

CVE-2018-20992

An issue was discovered in the claxon crate before 0.4.1 for Rust. Uninitialized memory can be exposed because certain decode buffer sizes are mishandled...

6.5CVSS7AI score0.00301EPSS
Exploits0References1
OSV
OSV
added 2021/08/25 8:43 p.m.21 views

GHSA-8C6G-4XC5-W96C Uninitialized memory exposure in claxon

Affected versions of Claxon made an invalid assumption about the decode buffer size being a multiple of a value read from the bitstream. This could cause parts of the decode buffer to not be overwritten. If the decode buffer was newly allocated and uninitialized, this uninitialized memory could b...

6.5CVSS6.5AI score0.00301EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2021/08/25 8:43 p.m.23 views

Uninitialized memory exposure in claxon

Affected versions of Claxon made an invalid assumption about the decode buffer size being a multiple of a value read from the bitstream. This could cause parts of the decode buffer to not be overwritten. If the decode buffer was newly allocated and uninitialized, this uninitialized memory could b...

6.5CVSS6.3AI score0.00301EPSS
Exploits0References6Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2013:1166-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS9.6AI score0.03181EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2020/10/21 12:0 a.m.49 views

EulerOS Virtualization 3.0.2.2 : python-pillow (EulerOS-SA-2020-2227)

According to the version of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.CVE-2020-5312 Note that Tenable Network Securit...

9.8CVSS6.6AI score0.01753EPSS
Exploits0References2
PyPA
PyPA
added 2020/01/03 1:15 a.m.3 views

PYSEC-2020-83

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...

9.8CVSS7.2AI score0.01753EPSS
Exploits0References13Affected Software1
CVE
CVE
added 2019/08/26 12:31 p.m.48 views

CVE-2018-20992

The CVE-2018-20992 issue affects the Rust Claxon crate (pre-0.4.1). A decode-buffer size handling flaw allowed uninitialized memory to be exposed; parts of the decode buffer could be overwritten or revealed depending on the bitstream value. Public descriptions (e.g., GHSA and RustSec advisories) ...

6.5CVSS6.5AI score0.00301EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2018/08/25 12:0 p.m.16 views

RUSTSEC-2018-0004 Malicious input could cause uninitialized memory to be exposed

Affected versions of Claxon made an invalid assumption about the decode buffer size being a multiple of a value read from the bitstream. This could cause parts of the decode buffer to not be overwritten. If the decode buffer was newly allocated and uninitialized, this uninitialized memory could b...

6.5CVSS6.5AI score0.00301EPSS
Exploits0References3
RustSec
RustSec
added 2018/08/25 12:0 p.m.19 views

Malicious input could cause uninitialized memory to be exposed

Affected versions of Claxon made an invalid assumption about the decode buffer size being a multiple of a value read from the bitstream. This could cause parts of the decode buffer to not be overwritten. If the decode buffer was newly allocated and uninitialized, this uninitialized memory could b...

6.5CVSS2.7AI score0.00301EPSS
Exploits0Affected Software1
OpenVAS
OpenVAS
added 2012/09/10 12:0 a.m.27 views

Slackware: Security Advisory (SSA:2004-239-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.4AI score0.06299EPSS
Exploits0References2
Rows per page
Query Builder