PT-2021-27970

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state includes functions such as mls semantic level expand, policydb user cache, and hashta...

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

...

Design/Logic Flaw

A component of the HarmonyOS has a Privileges Controls vulnerability. Local attackers may exploit this vulnerability to expand the Recording Trusted Domain...

CVE-2021-30354

Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand and results in a memory corruption that leads to code execution when parsing a crafted PDF book...

CVE-2021-30354

Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand and results in a memory corruption that leads to code execution when parsing a crafted PDF book...

CVE-2021-30354

Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand and results in a memory corruption that leads to code execution when parsing a crafted PDF book...

Amazon Kindle e-reader输入验证错误漏洞

The Amazon Kindle e-reader is an e-reader by Amazon.com, Inc. A security vulnerability exists in Amazon Kindle e-reader version 5.13.4 and earlier, which stems from a heap-based buffer overflow in the function CJBig2Image::expand. The vulnerability can be exploited by an attacker to execute code...

CVE-2021-30354: Integer Overflow to Buffer Overflow

Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand and results in a memory corruption that leads to code execution when parsing a crafted PDF book...

PT-2021-7543

Name of the Vulnerable Software and Affected Versions Amazon Kindle e-reader versions prior to and including 5.13.4 Description The issue is caused by an Integer Overflow in the CJBig2Image::expand function, leading to a Heap-Based Buffer Overflow. This results in memory corruption and allows for...

PYSEC-2021-796

TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's expanddims.cc contains a vulnerability which allows reading one element outside of bounds of heap allocated data. If axis is a large negative value e.g., -100000, then after the first if it would...

PYSEC-2021-598

TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's expanddims.cc contains a vulnerability which allows reading one element outside of bounds of heap allocated data. If axis is a large negative value e.g., -100000, then after the first if it would...

PYSEC-2021-307

TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's expanddims.cc contains a vulnerability which allows reading one element outside of bounds of heap allocated data. If axis is a large negative value e.g., -100000, then after the first if it would...

PYSEC-2021-796

TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's expanddims.cc contains a vulnerability which allows reading one element outside of bounds of heap allocated data. If axis is a large negative value e.g., -100000, then after the first if it would...

CVE-2021-37685

TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's expanddims.cc contains a vulnerability which allows reading one element outside of bounds of heap allocated data. If axis is a large negative value e.g., -100000, then after the first if it would...

Google TensorFlow 缓冲区错误漏洞

Google TensorFlow is an end-to-end open source machine learning platform. An information disclosure vulnerability exists in Google TensorFlow TFLite. The vulnerability is due to a heap out-of-bounds read flaw in expanddims.cc in TFLite, which can be exploited by an attacker to obtain sensitive...

PT-2021-21804 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: The issue is related to TensorFlow's TFLite, where the expand dims.cc file...

XML External Entity (XXE) Injection in JDOM

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. As a workaround, to avoid external entities being expanded, one can call builder.setExpandEntitiesfalse and they won't be expanded...

UBUNTU-CVE-2020-19609

Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiffexpandcolormap function when parsing TIFF files allowing attackers to cause a denial of service...

artifex mupdf 缓冲区错误漏洞

artifex mupdf is a rich text editor for individual developers. Rich text editor is different from text editor, programmers can go online to download free rich text editor embedded in their own website or program of course, paid features will be more powerful, convenient for users to edit articles...

sealious (>=0.9.4, <=0.12.6) potentially affected by CVE-2021-25948 via expand-hash (1.0.1)

expand-hash NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on expand-hash and may be impacted: - sealious =0.9.4, =0.12.6 Source cves: CVE-2021-25948 Source advisory: OSV:GHSA-X3WR-V4WX-5QPC...