4495 matches found
encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion
A flaw was found in the encoding/gob package of the Golang standard library. Calling Decoder.Decoding, a message that contains deeply nested structures, can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635...
encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion
A flaw was found in the encoding/gob package of the Golang standard library. Calling Decoder.Decoding, a message that contains deeply nested structures, can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635...
PT-2024-10203
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an integer overflow in the decode cb compound4res function of the Linux kernel's NFSD component. If the tag length is = U32 MAX - 3, the "length + 4" addition can...
PT-2024-10196
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an integer overflow in the svcrdma component of the Linux kernel. This overflow can be triggered by a user-controlled value, potentially allowing an attacker to...
ALPINE-CVE-2024-46954
An issue was discovered in decodeutf8 in base/gputf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal...
DEBIAN-CVE-2024-46954
An issue was discovered in decodeutf8 in base/gputf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal...
The vulnerability of the netfilter component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the netfilter component in the Linux operating system’s kernel is related to errors in boundary-filling reading in the decodeseq function. Exploiting this vulnerability can allow an attacker to cause a service failure...
encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion
A flaw was found in the encoding/gob package of the Golang standard library. Calling Decoder.Decoding, a message that contains deeply nested structures, can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635...
The vulnerability of the decode_plane function in the libavcodec/utvideodec.c file of the FFmpeg multimedia library, which involves reading data beyond the buffer’s acceptable limits, allows a malicious actor to cause a service failure.
The vulnerability of the decodeplane function in the libavcodec/utvideodec.c file of the FFmpeg multimedia library relates to reading data from beyond the allowed buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service failures by using a specially created AVI...
The vulnerability of the `ff_mpeg4_decode_picture_header` function in the `libavcodec/mpeg4videodec.c` file of the FFmpeg multimedia library, related to insufficient input data validation, allows a attacker to trigger a service failure.
The vulnerability of the ffmpeg4decodepictureheader function in the libavcodec/mpeg4videodec.c file of the FFmpeg multimedia library is related to insufficient input data validation. Exploiting this vulnerability could allow a malicious actor to cause service failures by using a specially created...
PT-2024-40626 · Openjpeg · Openjpeg
Name of the Vulnerable Software and Affected Versions: OpenJPEG affected versions not specified Description: The issue is related to a heap buffer overflow, specifically a WRITE 8 crash type. The crash occurs in the opj j2k read tile header function, which is called by opj j2k decode tiles and...
PT-2024-40623 · Git +1 · Llama.Cpp
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state includes functions such as llama output reserve and llama decode, and is located in...
PT-2024-40620 · Git +1 · Llama.Cpp
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to a segmentation fault on an unknown address. The crash state includes functions such as llama output reserve and llama decode, whi...
ghostscript:gs_device_eps2write_fuzzer: Crash in s_DCTD_process
Detailed Report: https://oss-fuzz.com/testcase?key=4830647133732864 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceeps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x50007fff8000 Crash State: sDCTDprocess sreadbuf...
UBUNTU-CVE-2024-46954
An issue was discovered in decodeutf8 in base/gputf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal...
PT-2025-28444 · Qualcomm · Snapdragon +7
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to memory corruption that occurs when executing a timestamp video decode command with large input values. Recommendations: At the moment, there is no information about a...
PT-2024-35530
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel, related to an uninitialized variable in the decode getfattr attrs function. The issue is triggered when calling decode attr...
encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion
A flaw was found in the encoding/gob package of the Golang standard library. Calling Decoder.Decoding, a message that contains deeply nested structures, can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635...
Security Bulletin: IBM Cognos Analytics Mobile (Android) is affected by multiple vulnerabilities
Summary There are vulnerabilities in Open Source Software OSS libraries consumed by IBM Cognos Analytics Mobile. These issues have been addressed by upgrading or removing the vulnerable libraries. Additionally, vulnerabilites related to CORS misconfiguration and Certificate Pinning have been...
PT-2024-10021
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a buffer overflow vulnerability in the exynos4 jpeg parse decode h tbl function within the Linux kernel's s5p-jpeg module. This vulnerability can be exploited to...