4497 matches found
AZL-34723 CVE-2023-39128 affecting package gdb for versions less than 13.2-3
GNU gdb GDB 13.0.50.20220805-git was discovered to contain a stack overflow via the function adadecode at /gdb/ada-lang.c...
UBUNTU-CVE-2023-39128
GNU gdb GDB 13.0.50.20220805-git was discovered to contain a stack overflow via the function adadecode at /gdb/ada-lang.c...
PT-2023-26794
Name of the Vulnerable Software and Affected Versions GNU gdb GDB version 13.0.50.20220805-git Description A stack overflow issue was discovered in the function ada decode at /gdb/ada-lang.c. This issue affects the GNU gdb GDB debugger. Recommendations For GNU gdb GDB version 13.0.50.20220805-git...
PT-2023-3902 · Envoy · Envoy
Name of the Vulnerable Software and Affected Versions: Envoy versions prior to 1.27.0 Envoy versions prior to 1.26.4 Envoy versions prior to 1.25.9 Envoy versions prior to 1.24.10 Envoy versions prior to 1.23.12 Description: The issue is related to a use-after-free error in the HTTP CORS filter o...
The vulnerability of the ezxml_decode function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.
The vulnerability of the ezxmldecode function in the ezXML XML syntax analysis library involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially created XML file...
CVE-2023-37748
ngiflib commit 5e7292 was discovered to contain an infinite loop via the function DecodeGifImg at ngiflib.c...
CVE-2023-37748
ngiflib commit 5e7292 was discovered to contain an infinite loop via the function DecodeGifImg at ngiflib.c...
opensc:fuzz_pkcs15_decode: Heap-double-free in sc_pkcs15_free_object_content
Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6607943066583040 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15decode Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x606000000020 Cra...
PT-2025-40207
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-next-20230707 409 Description The Linux kernel contains a flaw in the xfrm subsystem, specifically within the decode session6 function. When the xfrm device is configured with a qdisc of the sfb type, the c...
Vulnerability of the LZWDecode() function (libtiff/tif_lzw.c) in the LibTIFF library, which allows a hacker to cause a service failure
The vulnerability of the LZWDecode function libtiff/tiflzw.c in the LibTIFF library is related to the handling of the zero pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure using specially created input data...
dav1d:dav1d_fuzzer_mt: Segv on unknown address in dav1d_pal_pred_16bpc_ssse3.w32
Project: https://code.videolan.org/videolan/dav1d.git Detailed Report: https://oss-fuzz.com/testcase?key=4518112928858112 Project: dav1d Fuzzing Engine: libFuzzer Fuzz Target: dav1dfuzzermt Job Type: libfuzzerasani386dav1d Platform Id: linux Crash Type: Segv on unknown address Crash Address: Cras...
golang: encoding/pem: fix stack overflow in Decode
A buffer overflow flaw was found in Golang's library encoding/pem. This flaw allows an attacker to use a large PEM input more than 5 MB, causing a stack overflow in Decode, which leads to a loss of availability...
Denial Of Service (DoS)
libjxl.so is vulnerable to Denial of Service DoS. The vulnerability exists due to an integer underflow in the Decode function at decpatchdictionary.cc because the function doesn't properly check that all patches are in bounds resulting in an application crash...
The vulnerability of the decode_main_header() function (libavformat/nutdec.c) in the FFmpeg multimedia library allows a attacker to cause a service failure.
The vulnerability of the decodemainheader function libavformat/nutdec.c in the FFmpeg multimedia library is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
VulnCheck KEV: CVE-2023-2986
The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.14.2. This is due to insufficient encryption on the user being supplied during the abandoned cart link decode through the plugin. This allows unauthenticated...
Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities
Summary IBM has addressed multiple vulnerabilities in IBM Spectrum Discover. Webpack loader-utils CVE-2022-37601 is vulnerable to execute arbitrary code on the system caused by a pollution flaw in parseQuery function. OpenStack Keystone CVE-2021-3563 is vulnerable to bypass security restriction...
PT-2023-10174 · Nanopb · Nanopb
Name of the Vulnerable Software and Affected Versions: Nanopb versions prior to 0.3.1 Description: The issue allows size t overflows in pb dec bytes and pb dec string. Recommendations: For versions prior to 0.3.1, update to version 0.3.1 or later to resolve the issue...
PT-2023-3751 · Tp Link · Tp-Link Ec-70
Name of the Vulnerable Software and Affected Versions: TP-Link EC-70 devices through 2.3.4 Build 20220902 rel.69498 Description: The issue is related to a buffer overflow in the tpsocket base64 decode function of the TP-Link EC-70 camera's firmware. This buffer overflow can be exploited by a remo...
