PT-2022-36917

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to ...

PT-2022-3657 · Mutt +10 · Mutt +10

Name of the Vulnerable Software and Affected Versions: Mutt versions 0.94.13 through 2.2.3 Description: The issue is related to a buffer overflow in the mutt decode uuencoded function of the Mutt email client. This can allow a remote attacker to gain unauthorized access to protected information o...

PT-2022-36911

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, specifically a WRITE 4 crash type. The crash occurs in the following functions: decode mcu, consume...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in LibRaw::init_fuji_block

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5040319428689920 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

PT-2022-9772

Name of the Vulnerable Software and Affected Versions ark library affected versions not specified Description A remote code execution issue exists due to an incomplete check for the xheader decode path record function's parameter length value in the ark library. This allows remote attackers to...

Bandisoft ARK library缓冲区错误漏洞

Bandisoft ARK library is a South Korean company Bandisoft's library to decompress most of the existing compression formats such as ZIP, RAR, ALZ, EGG, etc. in various OS environments such as Windows, macOS, Linux, etc., and to create compressed files in ZIP/7Z format. A security vulnerability...

PT-2022-2216

Name of the Vulnerable Software and Affected Versions libsndfile affected versions not specified Description The issue is related to a buffer overflow in the psf nms adpcm decode block function of the libsndfile library, which is used for reading and writing audio files. This could allow a remote...

PT-2022-2214

Name of the Vulnerable Software and Affected Versions libsndfile affected versions not specified Description The issue is related to a buffer overflow in dynamic memory in the wavlike ima decode block function of the libsndfile library, which is used for reading and writing audio files. This coul...

CVE-2021-39667

In ih264dparsedecodeslice of ih264dparseslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10...

NS WooCommerce Watermark <= 2.11.3 - Abuse of Functionality

An unprivileged user could use the functionality of the plugin to load images that hide malware for example from passing malicious domains to hide their trace, by making them pass through the vulnerable domain. Search for a vulnerable domain with the dork:...

PT-2025-8208

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the NFSD component. The issue is related to the nfssvc decode writeargs function, where a potential underflow can...

matio:matio_fuzzer: Heap-buffer-overflow in H5MM_memcpy

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5768430031077376 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow READ 6 Crash...

CVE-2022-25050

rtl433 21.12 was discovered to contain a stack overflow in the function somfyiohcdecode. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

UBUNTU-CVE-2022-25050

rtl433 21.12 was discovered to contain a stack overflow in the function somfyiohcdecode. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

rtl_433 缓冲区错误漏洞

Rtl433 is a general-purpose data receiver from Benjamin Larsson's personal developer. A program for decoding radio transmissions from devices in the Ism band and other frequencies. A security vulnerability exists in rtl433 version 21.12, which stems from the inclusion of a stack overflow in the...

An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmval[bmlen-1] in nfsd4_decode_bitmap4 in fs/nfsd/nfs4xdr.c. In this flaw a local attacker with user privilege may gain access to out-of-bounds memory leading to a system integrity and confidentiality threat.

...

PT-2022-10952

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-12 Description The issue is related to a heap buffer overflow in the ih264d parse decode slice function of ih264d parse slice.c, which could lead to remote information disclosure without requiring...

PT-2022-17065

Name of the Vulnerable Software and Affected Versions rtl 433 version 21.12 Description A stack overflow was discovered in the function somfy iohc decode. This issue allows attackers to cause a Denial of Service DoS via a crafted file. Recommendations For rtl 433 version 21.12, consider disabling...

PT-2022-17066

Name of the Vulnerable Software and Affected Versions rtl 433 version 21.12 Description An Off-by-one Error occurs in the cmr113 decode function of the affected software when decoding a crafted file. This issue can potentially be exploited. Recommendations For rtl 433 version 21.12, at the moment...

rtl_433 安全漏洞

The rtl433 is a general purpose data receiver from the personal developer Benjamin Larsson. A program for decoding radio transmissions from devices in the Ism band and other frequencies. A security vulnerability exists in rtl433 version 21.12, which originates from an Off-by-one error when decodi...