3299 matches found
GHSA-7VHM-FMPH-7WXW audify vulnerable to Improper Validation of Array Index
All versions of the package audify are vulnerable to Improper Validation of Array Index when frameSize is provided to the new OpusDecoder.decode or new OpusDecoder.decodeFloat functions it is not checked for negative values. This can lead to a process crash...
CVE-2024-21522
All versions of the package audify are vulnerable to Improper Validation of Array Index when frameSize is provided to the new OpusDecoder.decode or new OpusDecoder.decodeFloat functions it is not checked for negative values. This can lead to a process crash...
CVE-2024-21522
All versions of the package audify are vulnerable to Improper Validation of Array Index when frameSize is provided to the new OpusDecoder.decode or new OpusDecoder.decodeFloat functions it is not checked for negative values. This can lead to a process crash...
PT-2024-18936 · Audify · Audify
Name of the Vulnerable Software and Affected Versions: audify versions all Description: The issue arises from improper validation of array index when frameSize is provided to the new OpusDecoder.decode or new OpusDecoder.decodeFloat functions, as it is not checked for negative values. This can le...
tpm2-tss: Buffer Overlow in TSS2_RC_Decode
A flaw was found in tpm2-tss, which is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In affected versions, Tss2RCSetHandler and Tss2RCDecode index into the layerhandler with an 8-bit layer number, but the array only ha...
OESA-2024-1804 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: adtsdecodeextradata in...
OpenJPEG Resource Management Error Vulnerability
OpenJPEG is an open source C-based JPEG2000 codec. A resource management error vulnerability exists in OpenJPEG, which stems from a resource exhaustion condition in the opjt1decodecblks function in tcd.c. The vulnerability is caused by a resource exhaustion condition...
SUSE CVE-2024-37298
gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of...
AZL-43083 CVE-2024-37298 affecting package telegraf for versions less than 1.31.0-2
gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of...
DEBIAN-CVE-2024-37298
gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of...
AZL-43474 CVE-2024-37298 affecting package podman 4.1.1-26
gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of...
PT-2024-27455 · Unknown +5 · Gorilla/Schema +5
Name of the Vulnerable Software and Affected Versions: gorilla/schema versions prior to 1.4.1 Description: The issue concerns a memory exhaustion vulnerability in gorilla/schema. When schema.Decoder.Decode is run on a struct that has a field of type struct..., it opens up the possibility of...
OESA-2024-1761 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A null pointer...
OESA-2024-1759 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A null pointer...
Malicious code in null_hash_grab_decode (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2775 Malicious code in null_hash_grab_decode (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2067 Malicious code in decode-2021-fe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d34838073a6c60e6980c2462e6fd5a775a631381a50aca2fe2f8e40addbbb336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in decode-2021-fe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d34838073a6c60e6980c2462e6fd5a775a631381a50aca2fe2f8e40addbbb336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-37305 Buffer overflow in deserialization in oqs-provider
oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using post-quantum algorithms from liboqs. Flaws have been identified in the way oqs-provider handles lengths decoded with DECODEUINT32 at the start of...
PT-2024-27803
Name of the Vulnerable Software and Affected Versions UERANSIM versions prior to 3.2.6 Description The issue allows for an out-of-bounds read when a RLS packet is sent to gNodeB with a malformed PDU length. This occurs in the readOctetString function in src/utils/octet view.cpp and the...