CVE-2023-32695

socket.io parser is a socket.io encoder and decoder written in JavaScript complying with version 5 of socket.io-protocol. A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. A patch has been released in version 4.2.3...

CVE-2023-32695 Insufficient validation when decoding a Socket.IO packet

socket.io parser is a socket.io encoder and decoder written in JavaScript complying with version 5 of socket.io-protocol. A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. A patch has been released in version 4.2.3...

CVE-2023-32695

socket.io parser is a socket.io encoder and decoder written in JavaScript complying with version 5 of socket.io-protocol. A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. A patch has been released in version 4.2.3...

kernel: drm/amd/display: Check correct bounds for stream encoder instances for DCN303

A flaw was found in the Linux kernel's AMD display driver. A missing boundary check when referencing stream encoder instances on DCN303 hardware allows an out-of-bounds memory access. A local user could exploit this vulnerability to cause a denial of service DoS or potentially expose sensitive...

PT-2025-26005 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the Linux kernel, specifically the drm/amd/display component for DCN303. It involves checking the correct bounds for stream encoder instances to prevent potential ou...

pdfbox:PDFStreamParserFuzzer: Security exception in org.apache.pdfbox.pdfparser.PDFStreamParser.parseNextToken

Project: https://github.com/apache/pdfbox.git Detailed Report: https://oss-fuzz.com/testcase?key=4960578058452992 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State...

CVE-2022-48236

In MP3 encoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

CVE-2022-48235

In MP3 encoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

CVE-2022-48236

In MP3 encoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

CVE-2022-48235

In MP3 encoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

Out-of-bounds

In MP3 encoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

Out-of-bounds

In MP3 encoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

CVE-2022-48236

In MP3 encoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

CVE-2022-48236

CVE-2022-48236 concerns the MP3 encoder in UNISOC chipsets. A missing bounds check can cause an out-of-bounds read, leading to local denial of service with system‑level privileges required. Reported base metrics (CVSS 3.1: AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H; base score 4.4) indicate local access...

CVE-2022-48236

In MP3 encoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

CVE-2022-48235

In MP3 encoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

CVE-2022-48235

In MP3 encoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

CVE-2022-48235

The CVE-2022-48235 issue concerns the UNISOC MP3 encoder in chipsets, where a missing bounds check can cause an out-of-bounds write. This leads to a local denial of service with System execution privileges required. Affected component: MP3 encoder; root cause: missing bounds check leading to out-...

CVE-2022-48235: Out-of-bounds Write

In MP3 encoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

PT-2023-15630 · Unknown · Mp3 Encoder

Name of the Vulnerable Software and Affected Versions: MP3 encoder affected versions not specified Description: The issue is related to a missing bounds check in the MP3 encoder, which could lead to a possible out of bounds write. This might result in a local denial of service and requires System...