CVE-2023-5363 Incorrect cipher key & IV length processing

Issue summary: A bug has been identified in the processing of key and initialisation vector IV lengths. This can lead to potential truncation or overruns during the initialisation of some symmetric ciphers. Impact summary: A truncation in the IV can result in non-uniqueness, which could result in...

CVE-2023-5363

Issue summary: A bug has been identified in the processing of key and initialisation vector IV lengths. This can lead to potential truncation or overruns during the initialisation of some symmetric ciphers. Impact summary: A truncation in the IV can result in non-uniqueness, which could result in...

CVE-2023-5363

Issue summary: A bug has been identified in the processing of key and initialisation vector IV lengths. This can lead to potential truncation or overruns during the initialisation of some symmetric ciphers. Impact summary: A truncation in the IV can result in non-uniqueness, which could result in...

Advisory ROSA-SA-2023-2271

software: pdfbox 2.0.24 WASP: ROSA-CHROME packageevrstring: pdfbox-2.0.24-1.src.rpm CVE-ID: CVE-2021-27807 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A carefully crafted PDF file may cause an infinite loop when loading the file. This issue affects Apache PDFBox version 2.0.22 and earlier versions of...

SUSE CVE-2023-46009

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...

CVE-2023-43251

XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...

CVE-2023-43251

XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...

CVE-2023-43251

XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...

Code injection

XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...

CVE-2023-43251

XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...

CVE-2023-43251

CVE-2023-43251 affects XNSoft Nconvert 7.136, with an Exception Handler Chain Corrupted in image processing. The vulnerability could enable a Denial of Service (DoS) and, in some cases, remote code execution after processing a crafted image file. Public sources describe the issue across multiple ...

XNSoft Nconvert Security Vulnerability

XNSoft Nconvert is a powerful command line multi-platform batch image processor from XNSoft with over 80 commands. A security vulnerability exists in XNSoft Nconvert version 7.136, which originated from a vulnerability that allows an attacker to cause damage to the Exception Handler Chain via a...

PT-2023-28744 · Xnsoft · Xnsoft Nconvert

Name of the Vulnerable Software and Affected Versions: XNSoft Nconvert version 7.136 Description: The issue is related to an Exception Handler Chain Corrupted via a crafted image file, which could be exploited for a Denial of Service DoS or possibly to achieve code execution. Recommendations: For...

CVE-2023-43251

XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...

Code injection

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...

UBUNTU-CVE-2023-46009

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...

gifsicle Security Breach

gifsicle is Gifsicle's handling of GIF image files. A security vulnerability exists in gifsicle version 1.94, which stems from a Floating Point Exception FPE in resizestream in src/xform.c. The vulnerability is caused by the presence of a floating point exception FPE in resizestream...

CVE-2023-46009

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...

OSV-2023-1024 Security exception in org.apache.poi.util.IOUtils.safelyAllocate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63288 Crash type: Security exception Crash state: org.apache.poi.util.IOUtils.safelyAllocate org.apache.poi.hssf.record.RecordInputStream.readRemainder org.apache.poi.hssf.record.UnknownRecord...

PT-2023-35533 · Apache · Apache Poi

Name of the Vulnerable Software and Affected Versions: Apache POI affected versions not specified Description: A security exception occurs due to a crash in the org.apache.poi.util.IOUtils.safelyAllocate function, which is called by org.apache.poi.hssf.record.RecordInputStream.readRemainder and...