EUVD-2021-19274

Malware in sbrugna...

EUVD-2021-19275

Malware in sbrugna...

Use After Free

Dpic is vulnerable to Use After Free. This vulnerability exists in the 'thedeletestringbox' function of 'dpic.y' due to the lack of validation of user inputs, which allows an attacker to exploit it through the use of maliciously crafted input...

SUSE CVE-2021-32421

dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox function in dpic.y...

CVE-2021-33390

dpic 2021.04.10 has a use-after-free in thedeletestringbox function in dpic.y. A different vulnerablility than CVE-2021-32421...

DEBIAN-CVE-2021-33388

dpic 2021.04.10 has a Heap Buffer Overflow in themakevar function in dpic.y...

CVE-2021-32421

dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox function in dpic.y...

UBUNTU-CVE-2021-33388

dpic 2021.04.10 has a Heap Buffer Overflow in themakevar function in dpic.y...

CVE-2021-33388

dpic 2021.04.10 has a Heap Buffer Overflow in themakevar function in dpic.y...

UBUNTU-CVE-2021-33390

dpic 2021.04.10 has a use-after-free in thedeletestringbox function in dpic.y. A different vulnerablility than CVE-2021-32421...

CVE-2021-32421

dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox function in dpic.y...

Design/Logic Flaw

dpic 2021.04.10 has a use-after-free in thedeletestringbox function in dpic.y. A different vulnerablility than CVE-2021-32421...

UBUNTU-CVE-2021-32421

dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox function in dpic.y...

CVE-2021-32420

CVE-2021-32420 affects dpic 2021.01.01 and is caused by a Heap-based Buffer Overflow in the thestorestring function in dpic.y. The CVE’s NVD entry lists a CVSS v3.1 base score of 7.5 (HIGH) with Network attack vector, Low attack complexity, no privileges or user interaction, and Availability impa...

dpic 缓冲区错误漏洞

dpic is an implementation of the pic language. A security vulnerability exists in dpic version 2021.04.10, which stems from a buffer overflow vulnerability in the themakevar method of the dpic.y file...

CVE-2021-33390

dpic 2021.04.10 has a use-after-free in thedeletestringbox function in dpic.y. A different vulnerablility than CVE-2021-32421...

CVE-2021-33390

CVE-2021-33390 relates to dpic 2021.04.10, which has a use-after-free in thedeletestringbox() function of dpic.y. The connected OSV/NVD entries confirm this is a distinct vulnerability from CVE-2021-32421. No explicit exploit details, affected versions beyond 2021.04.10, or remediation steps are ...

dpic 资源管理错误漏洞

dpic is an implementation of the pic language. A security vulnerability exists in dpic version 2021.04.10, which stems from a post-release reuse vulnerability in thedeletestringbox method of the dpic.y file...

dpic 缓冲区错误漏洞

dpic is an implementation of the pic language. A security vulnerability exists in dpic version 2021.01.01, which stems from a buffer overflow vulnerability in thestorestring method of the dpic.y file...

CVE-2021-33388

CVE-2021-33388 affects the dpic package: the 2021.04.10 release contains a Heap Buffer Overflow in the makevar() function (dpic.y) . CVSSv3.1 base score 9.8 (CRITICAL) with network attack vector, no user interaction. Several connected sources confirm the issue and note remediation status varies b...