46 matches found
EUVD-2012-4487
Malware in sbrugna...
EUVD-2017-2774
Malware in sbrugna...
EUVD-2025-29459
Malicious code in bioql PyPI...
Slice Ring Buffer and Slice Deque contains four unique double-free vulnerabilities triggered through safe APIs
The crate slice-ring-buffer was developed as a fork of slice-deque to continue maintenance and provide security patches, since the latter has been officially unmaintained RUSTSEC-2020-0158. While slice-ring-buffer has addressed some previously reported memory safety issues inherited from its fork...
Oracle Linux 8 : curl (ELSA-2020-1792)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1792 advisory. - double free due to subsequent call of realloc CVE-2019-5481 - fix heap buffer overflow in function tftpreceivepacket CVE-2019-5482 Tenable has...
SUSE-SU-2022:2673-1 Security update for python-ujson
This update for python-ujson fixes the following issues: - CVE-2022-31116: Fixed improper decoding of escaped surrogate characters bsc1201255. - CVE-2022-31117: Fixed a double free while reallocating a buffer for string decoding bsc1201254...
OPENSUSE-SU-2020:0438-1 Security update for ldns
This update for ldns fixes the following issues: - CVE-2017-1000231: Fixed a buffer overflow during token parsing bsc1068711. - CVE-2017-1000232: Fixed a double-free vulnerability in str2host.c bsc1068709. This update was imported from the SUSE:SLE-15:Update update project...
Debian DLA-1998-1 : python-psutil security update
It was discovered that there were multiple double free vulnerabilities in python-psutil, a Python module providing convenience functions for accessing system process data. This was caused by incorrect reference counting handling within for/while loops that convert system data into said Python...
[SECURITY] [DLA 1998-1] python-psutil security update
Package : python-psutil Version : 2.1.1-1+deb8u1 CVE ID : CVE-2019-18874 Debian Bug : 944605 It was discovered that there were multiple double free vulnerabilities in python-psutil, a Python module providing convenience functions for accessing system process data. This was caused by incorrect...
SUSE-SU-2019:0747-1 Security update for gd
This update for gd fixes the following issues: Security issues fixed: - CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function bsc1123361. - CVE-2019-6978: Fixed a double free in the gdImagePtr functions bsc1123522...
Double free
An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cpp because of a destructor's two OPLDestroy calls, each of which frees TLTABLE, SINTABLE, AMSTABLE, and VIBTABLE...
CVE-2018-17825
An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cpp because of a destructor's two OPLDestroy calls, each of which frees TLTABLE, SINTABLE, AMSTABLE, and VIBTABLE...
CVE-2018-17825
CVE-2018-17825 affects AdPlug 2.3.1. The vulnerability is a double-free in the CEmuopl class (emuopl.cpp) caused by a destructor calling OPLDestroy twice, freeing TL_TABLE, SIN_TABLE, AMS_TABLE and VIB_TABLE. Fedora and OpenVAS/Nessus references confirm multiple advisories tying to AdPlug, Audaci...
CVE-2018-17825
An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cpp because of a destructor's two OPLDestroy calls, each of which frees TLTABLE, SINTABLE, AMSTABLE, and VIBTABLE...
Double free
Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...
CVE-2018-8835
Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution...
CVE-2018-8835
Advantech WebAccess HMI Designer 2.1.7.32 and prior are affected by a double‑free vulnerability in processing specially crafted .pm3 files, which may allow remote code execution. CVE-2018-8835. The issue is caused by improper handling during file processing and is highlighted alongside other vuln...
Important: GraphicsMagick
Issue Overview: Memory information disclosure in DescribeImage function in magick/describe.c GraphicsMagick is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c file, because of a heap-based buffer over-read. The portion of th...
CVE-2017-11139
GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...
CVE-2017-11139
GraphicsMagick 1.3.26 contains a double-free vulnerability in ReadOneJNGImage() (coders/png.c), tracked as CVE-2017-11139. Connected advisories indicate multiple distributions published fixes; e.g., Debian/DSA-4321-1 and Fedora advisories include GraphicsMagick updates to 1.3.28+ to address this ...