CVE-2021-45935

Summary: CVE-2021-45935 affects Grok 9.5.0 and involves a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress (invoked via std::__1::__packaged_task_func and related bindings). Impact (as per sources): NVD indicates a base score of 4.3 (MEDIUM) under CVSS v2, and 5.5 (MEDIUM) under C...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in cmsFloat2LabEncoded

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5016951888412672 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

PT-2021-24324

Name of the Vulnerable Software and Affected Versions: Grok version 9.5.0 Description: The issue is a heap-based buffer overflow in the openhtj2k::T1OpenHTJ2K::decompress function, which is called from std:: 1:: packaged task funcstd:: 1:: bindgrk::T1DecompressScheduler::deco and std:: 1::package...

CVE-2021-45935: Out-of-bounds Write

Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress called from std::1::packagedtaskfunc...

PT-2021-27983

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the functions ndlz4 decompress, ndlz decompress, and...

PT-2021-27961

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow WRITE crash. The crash occurs in the ndlz8 decompress function, which is called by blosc d and ultimately by...

PT-2021-27959

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow write crash has been reported, involving the functions ndlz4 decompress, ndlz decompress, and blosc d. Recommendations At the moment...

A crafted NTFS image can cause an out-of-bounds access in ntfs_decompress in NTFS-3G < 2021.8.22.

...

PT-2021-27931

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: ndlz8 decompress, blosc d, and do job. No information is...

PT-2021-27926

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE crash has been reported, involving the ndlz4 decompress and blosc d functions, as well as the do job function. Recommendations...

OSV-2021-1645 UNKNOWN READ in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41636 Crash type: UNKNOWN READ Crash state: ndlz4decompress bloscd dojob...

PT-2021-27924

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ crash has been reported, involving the uncompress b44 impl, default decompress chunk, and exr decoding run functions. No...

PT-2021-27923

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: ndlz4 decompress, blosc d, and do job. No information is...

CLSA-2021-1635459154 Fix CVE(s): CVE-2021-28831

SECURITY UPDATE: operation on invalid pointer - debian/patches/CVE-2021-28831.patch: decompressgunzip.c mishandles the error bit on the huftbuild result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data. - CVE-2021-28831...

CVE-2020-28963

Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow via the decompress function...

CVE-2020-28963

Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow via the decompress function...

Buffer overflow

Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow via the decompress function...

CVE-2020-28963

Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow via the decompress function...

CVE-2020-28963

CVE-2020-28963 affects Passcovery ZIP Password Recovery v3.70.69.0, with a buffer overflow in the decompression function. The issue can allow an attacker with local access to overwrite local process registers, potentially compromising a local software process and elevating privileges. The vulnera...

PT-2021-11612

Name of the Vulnerable Software and Affected Versions: Passcovery Co. Ltd ZIP Password Recovery version 3.70.69.0 Description: A buffer overflow issue was discovered in the decompress function. Recommendations: For version 3.70.69.0, at the moment, there is no information about a newer version th...