4489 matches found
SUSE CVE-2024-53146
In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is = U32MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decodecbcompound4res...
PT-2024-37016
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory allocation failure check has been added to the Linux kernel media to prevent a potential issue. In the ia css 3a statistics allocate function, there was no check on the allocati...
CVE-2020-1819
There are multiple out of bounds OOB read vulnerabilities in the implementation of the Common Open Policy Service COPS protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities...
CLSA-2024-1735065830 Fix CVE(s): CVE-2024-11233
SECURITY UPDATE: Security vulnerability in package - debian/patches/CVE-2024-11233.patch: fix error in convert.quoted printable-decode filter certain data leading to buffer overread. Fix segfault with streams and invalid data. - CVE-2024-11233...
CLSA-2024-1734543983 php: Fix of CVE-2024-11233
CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode filter...
CLSA-2024-1734368527 php: Fix of CVE-2024-11233
CVE-2024-11233: Fix buffer overread by one byte issue in convert.quoted-printable-decode filter - Fix Bug 74267: segfault with streams and invalid data...
PT-2024-41104 · Git +1 · Libredwg
Name of the Vulnerable Software and Affected Versions: Libdwg affected versions not specified Description: The software contains an index-out-of-bounds issue discovered by OSS-Fuzz. The crash occurs within the dwg decode eed, dwg decode entity, and dwg decode RAY private functions. Recommendation...
USN-7157-2 php7.4 regression
USN-7157-1 fixed vulnerabilities in PHP. The patch for CVE-2024-8932 caused a regression in php7.4. This update fixes the problem. Original advisory details: It was discovered that PHP incorrectly handled certain inputs when processed with convert.quoted-printable decode filters. An attacker coul...
USN-7157-1 php7.4, php8.1, php8.3 vulnerabilities
It was discovered that PHP incorrectly handled certain inputs when processed with convert.quoted-printable decode filters. An attacker could possibly use this issue to expose sensitive information or cause a crash. CVE-2024-11233 It was discovered that PHP incorrectly handled certain HTTP request...
nfs: Fix KMSAN warning in decode_getfattr_attrs()
...
libsndfile:sndfile_alt_fuzzer: Use-of-uninitialized-value in alac_decode
Detailed Report: https://oss-fuzz.com/testcase?key=4563150486700032 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilealtfuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: alacdecode alacdecodeblock alacse...
UBUNTU-CVE-2024-47613
GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been identified in gstgdkpixbufdecflush within gstgdkpixbufdec.c. This function invokes memcpy, using outpix as the destination address. outpix is expected to point to the fra...
The vulnerability of the SEC_ASN1DecodeItem_Util function in the Mozilla Firefox browser and Thunderbird email client allows a hacker to trigger a service failure.
The vulnerability of the SECASN1DecodeItemUtil function in Mozilla Firefox and Thunderbird’s email client is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions...
UBUNTU-CVE-2024-47607
GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gstopusdecparseheader function within gstopusdec.c'. The pos array is a stack-allocated buffer of size 64. If nchannels exceeds 64, the for loop will write beyond the...
CLSA-2024-1733908995 php: Fix of CVE-2024-11233
CVE-2024-11233: Fix buffer overflow vulnerability in convert.quoted-printable-decode filter; fix bug 74267...
GStreamer 代码问题漏洞
GStreamer is a GStreamer open source set of frameworks for processing streaming media. A code issue vulnerability exists in GStreamer that stems from a null pointer dereference vulnerability found in the gstjpegdecnegotiate function in gstjpegdec.c. The vulnerability is a result of a null pointer...
Single byte overread with convert.quoted-printable-decode filter
...
OESA-2024-2505 golang security update
. Security Fixes: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.CVE-2024-34156...
PT-2024-36063
Name of the Vulnerable Software and Affected Versions: ClipBucket-v5 versions 2.0 through 5.5.1 Revision 199 Description: ClipBucket V5 provides open source video hosting with PHP. The issue exists in the upload/photo upload.php file, specifically within the decode key function. This function...