CVE-2020-14937

The CVE-2020-14937 entry concerns Contiki-NG versions 4.4–4.5 where the SNMP BER encoder/decoder mishandles input/output buffer lengths, causing out-of-bounds reads/writes during BER encoding/decoding. Affected component: Contiki-NG SNMP BER encoder/decoder; root cause: insufficient verification ...

Denial Of Service (DoS)

asyncpg is vulnerable to denial of service DoS. The vulnerability exists due to the access to an uninitialized pointer in the array data decoder through a server response...

DEBIAN-CVE-2020-17446

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

Code injection

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

CVE-2020-17446

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

PYSEC-2020-24

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

PYSEC-2020-24

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

UBUNTU-CVE-2020-17446

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

CVE-2020-17446

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

OSV-2020-1377 Segv on unknown address in slice_segment_header::operator=

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22924 Crash type: Segv on unknown address Crash state: slicesegmentheader::operator= slicesegmentheader::read decodercontext::readsliceNAL...

OSV-2020-1192 Index-out-of-bounds in decoder_context::has_sps

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13591 Crash type: Index-out-of-bounds Crash state: decodercontext::hassps picparameterset::read decodercontext::readppsNAL...

CVE-2020-0225

In a2dpvendorldacdecoderdecodepacket of a2dpvendorldacdecoder.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

OSV-2020-819 Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22224 Crash type: Use-of-uninitialized-value Crash state: fuzzing::memory::memorytestmsan fuzzing::memory::memorytest FLAC::Decoder::FuzzerStream::writecallback...

jbig2dec: heap-based buffer overflow in jbig2_image_compose in jbig2_image.c

An integer overflow was found in jbig2dec, which causes an out-of-bounds read/write in the jbig2imagecompose function. This flaw could potentially result in the execution of code on the system. Applications that use jbig2dec with untrusted input may be vulnerable to this flaw. The highest threat...

draco:draco_pc_decoder_fuzzer: Heap-use-after-free in draco::Metadata::AddSubMetadata

Detailed Report: https://oss-fuzz.com/testcase?key=6326315129765888 Project: draco Fuzzing Engine: afl Fuzz Target: dracopcdecoderfuzzer Job Type: aflasandraco Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6040000000b0 Crash State: draco::Metadata::AddSubMetadata...

draco:draco_mesh_decoder_without_dequantization_fuzzer: Crash in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c

Detailed Report: https://oss-fuzz.com/testcase?key=5680036234133504 Project: draco Fuzzing Engine: libFuzzer Fuzz Target: dracomeshdecoderwithoutdequantizationfuzzer Job Type: libfuzzerubsandraco Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x010000400000 Crash State: std::1::tree,...

draco:draco_pc_decoder_fuzzer: Heap-use-after-free in void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocat

Detailed Report: https://oss-fuzz.com/testcase?key=5111868163883008 Project: draco Fuzzing Engine: afl Fuzz Target: dracopcdecoderfuzzer Job Type: aflasandraco Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6040000000d8 Crash State: void...

Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

RIOT buffer overflow vulnerability

RIOT RIOT-OS is a set of operating systems for applications in the IoT field. A buffer error vulnerability exists in the base64 decoder in RIOT version 2020.04, which stems from the program not properly checking boundaries. A remote attacker can exploit this vulnerability to execute arbitrary cod...

CVE-2020-15350

RIOT 2020.04 has a buffer overflow in the base64 decoder. The decoding function base64decode uses an output buffer estimation function to compute the required buffer capacity and validate against the provided buffer size. The base64estimatedecodesize function calculates the expected decoded size...