CVE-2021-40574

GPAC GPAC is affected: the MP4Box binary (GPAC) from 0.9.0-preview to 1.0.1 contains a double-free in gf_text_get_utf8_line (load_text.c), enabling denial of service and potentially code execution/privilege escalation. Debian advisory DSA-5411-1 fixes this in bullseye with gpac version 1.0.1+dfsg...

CVE-2021-40570

GPAC vulnerability CVE-2021-40570 affects the MP4Box binary in GPAC 1.0.1, where a double-free in avc_compute_poc (av_parsers.c) can lead to denial of service and may allow code execution with privilege escalation. Public sources confirm the issue and its impact; Debian advisory notes fixed versi...

CVE-2021-37529

A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the freestream function in readpics.c, which could cause a denial of service context-dependent...

CVE-2021-37529

A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the freestream function in readpics.c, which could cause a denial of service context-dependent...

CVE-2021-37529

A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the freestream function in readpics.c, which could cause a denial of service context-dependent...

CVE-2021-40038

CVE-2021-40038 describes a double-free vulnerability in the AOD module of HarmonyOS-based smartphones. The available connected records consistently indicate this is a Huawei/HarmonyOS issue (AOD doubles release could affect integrity). The NVD entry lists a base score of 5.0 (MEDIUM) under CVSS2 ...

EulerOS Virtualization 3.0.2.6 : gd (EulerOS-SA-2021-2891)

According to the versions of the gd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is...

Double free

There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel crash or privilege escalation...

EulerOS Virtualization 3.0.2.0 : gd (EulerOS-SA-2021-2850)

According to the versions of the gd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is...

SUSE-SU-2021:4153-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2021-28041: Fixed double free in ssh-agent bsc1183137...

OPENSUSE-SU-2021:4153-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2021-28041: Fixed double free in ssh-agent bsc1183137...

DEBIAN-CVE-2021-45288

A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of Service via a crafted file in the MP4Box command...

CVE-2021-45288

A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of Service via a crafted file in the MP4Box command...

CVE-2021-45288

Removed by vendor...

SUSE: Security Advisory (SUSE-SU-2021:4060-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : gd (EulerOS-SA-2021-2659)

According to the versions of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - DISPUTED gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is 'The GD2 image...

ALSA-2021:4324 Moderate: python-psutil security update

psutil is a module providing an interface for retrieving information on all running processes and system utilization CPU, memory, disks, network, users in a portable way by using Python. Security Fixes: python-psutil: double free because of refcount mishandling CVE-2019-18874 For more details abo...

EUVD-2021-8969

An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a reference to a timeout object to be stored in two different places. When closed, the document will result in the reference being released twice. This can lea...

CVE-2021-21797

CVE-2021-21797 is a double-free vulnerability in Nitro Pro PDF’s JavaScript runtime (TimeOutObject) that can enable code execution when a specially crafted document is opened. The Red Hat advisory and Talos writeups confirm exploitation via Nitro Pro PDF’s embedded JavaScript, describing a double...

Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2021-2321)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...