10056 matches found
Debian: Security Advisory (DLA-2929-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way
A flaw was found in the Netty's netty-codec due to unrestricted chunk lengths in the SnappyFrameDecoder. By sending a specially-crafted input, a remote attacker could cause excessive memory usage resulting in a denial of service...
netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data
A flaw was found in Netty's netty-codec due to size restrictions for decompressed data in the Bzip2Decoder. By sending a specially-crafted input, a remote attacker could cause a denial of service...
libaom:av1_dec_fuzzer: Heap-buffer-overflow in row_mt_worker_hook
Detailed Report: https://oss-fuzz.com/testcase?key=5555611524268032 Project: libaom Fuzzing Engine: honggfuzz Fuzz Target: av1decfuzzer Job Type: honggfuzzasanlibaom Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x613000000aa8 Crash State: rowmtworkerhook threadloop...
libaom:av1_dec_fuzzer: Heap-buffer-overflow in row_mt_worker_hook
Detailed Report: https://oss-fuzz.com/testcase?key=5313574883426304 Project: libaom Fuzzing Engine: honggfuzz Fuzz Target: av1decfuzzer Job Type: honggfuzzasanlibaom Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x613000000aa8 Crash State: rowmtworkerhook execute...
openh264:decoder_fuzzer: Index-out-of-bounds in WelsDec::WelsInitRefList
Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=6445159338868736 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerubsanopenh264 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...
libaom:av1_dec_fuzzer: Crash in av1_dec_row_mt_dealloc
Detailed Report: https://oss-fuzz.com/testcase?key=5708384987381760 Project: libaom Fuzzing Engine: libFuzzer Fuzz Target: av1decfuzzer Job Type: libfuzzerubsanlibaom Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0007024c2ff8 Crash State: av1decrowmtdealloc av1decoderremove...
Infinite loop
Overview std/encoding/xml is a Go standard library package std/encoding/xml Affected versions of this package are vulnerable to Infinite loop. Go Vulnerability Report: The Decode, DecodeElement, and Skip methods of an xml.Decoder provided by xml.NewTokenDecoder may enter an infinite loop when...
PT-2025-8151
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc2+ Description A potential use-after-free issue has been identified in the Linux kernel, specifically in the cxl decoder release function. This issue arises when the function attempts to reference its...
ffjpeg Denial of Service Vulnerability (CNVD-2022-12798)
ffjpeg is a JPEG encoder/decoder by the individual developer Kai Chen in China. A rejection vulnerability exists in ffjpeg, which originates when the size information in the metadata of a bmp is out of range, it returns without allocating a memory buffer to pb-pdata and without exiting the progra...
netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way
A flaw was found in the Netty's netty-codec due to unrestricted chunk lengths in the SnappyFrameDecoder. By sending a specially-crafted input, a remote attacker could cause excessive memory usage resulting in a denial of service...
netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data
A flaw was found in Netty's netty-codec due to size restrictions for decompressed data in the Bzip2Decoder. By sending a specially-crafted input, a remote attacker could cause a denial of service...
CVE-2022-23585
Tensorflow is an Open Source Machine Learning Framework. When decoding PNG images TensorFlow can produce a memory leak if the image is invalid. After calling png::CommonInitDecode..., &decode, the decode value contains allocated buffers which can only be freed by calling...
graphicsmagick:coder_DCM_fuzzer: Use-of-uninitialized-value in jp2_box_get
Detailed Report: https://oss-fuzz.com/testcase?key=6147496928215040 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderDCMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jp2boxget jp2decode...
stb:stbi_read_fuzzer: Heap-use-after-free in stbi__jpeg_huff_decode
Detailed Report: https://oss-fuzz.com/testcase?key=6483092183842816 Project: stb Fuzzing Engine: afl Fuzz Target: stbireadfuzzer Job Type: aflasanstb Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x629000255264 Crash State: stbijpeghuffdecode stbijpegdecodeblockprogac...
netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way
A flaw was found in the Netty's netty-codec due to unrestricted chunk lengths in the SnappyFrameDecoder. By sending a specially-crafted input, a remote attacker could cause excessive memory usage resulting in a denial of service...
CVE-2018-14645
A flaw was discovered in the HPACK decoder of haproxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpackvalididx resulted in a remote crash and denial of service. Mitigation HTTP/2 support is disabled by default on OpenShift Container Platform 3.11. To mitigate this...
UBUNTU-CVE-2021-40563
A Segmentation fault exists casued by null pointer dereference exists in Gpac through 1.0.1 via the naludmxcreateavcdecoderconfig function in reframenalu.c when using mp4box, which causes a denial of service...
GPAC 代码问题漏洞
GPAC is an open source multimedia framework. A denial of service vulnerability exists in versions of GPAC prior to 1.0.1. The vulnerability stems from a segmentation error in the naludmxcreateavcdecoderconfig function in reframenalu.c caused by null pointer dereference. An attacker could exploit...
