GPAC MPEG-4 Decoder Heap Buffer Overflow DoS

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s functionality-related decoding process is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its...

VirtualBox Core Component Confidential Data Access Data Compromise

The vulnerability of the Core component of the VirtualBox virtualization software is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

BIND DNS DoS

The vulnerability of the BIND DNS server component is related to the lack of use of the assert function. Exploiting this vulnerability allows a remote attacker to cause service failures...

Node Set-value module Type Conversion Confidential Data Compromise

The vulnerability of the Node Set-value module is related to type conversion errors. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service failures...

InnoDB DoS

The vulnerability of the InnoDB component in the MariaDB and MySQL database management systems is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service failures...

InnoDB DoS

The vulnerability of the InnoDB component in the MariaDB and MySQL database management systems is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service failures...

Golang net.Lookup Functions Data Compromise

The vulnerability of the net.LookupAddr,CNAME,Host functions in the Golang programming language is related to the lack of hostname filtering in the DNS server responses. Exploiting this vulnerability allows an attacker who operates remotely to access confidential data, compromise its integrity, a...

Tcl nmakehlp.c Heap Buffer Overflow DoS

The vulnerability of the Tcl programming language component nmakehlp.c is related to insufficient handling of format lines. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file...

Libde265 ff_hevc_put_unweighted_pred_8_sse Heap Buffer Overflow DoS

The vulnerability of the ffhevcputunweightedpred8sse function in the H.265 Libde265 video codec implementation is related to writing outside the buffer boundaries. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause servi...

HDLR decoder in the Data Compromise

The vulnerability of the HDLR decoder in the MPEG-4 multimedia platform GPAC decoding function is related to the lack of a mechanism for data type conversion. Exploiting this vulnerability allows an attacker operating remotely to gain access to confidential data, compromise its integrity, and cau...

libheif/box.cc Heap Buffer Overflow DoS

The vulnerability of the Fraction function in the libheif/box.cc component of the HEIF and AVIF encoding/decoding library allows attackers to exploit it remotely. This enables them to access confidential data, compromise its integrity, and cause service failures...

Tinyobjloader LoadObj Buffer Overflow DoS

The vulnerability of the LoadObj function of the .obj Tinyobjloader loader is related to unvalidated array indexing. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures through the use of a malicious file...

Configuration Management Remote Execution Information Disclosure

The vulnerability of configuration management systems and remote execution of operations like Salt is related to the exposure of information in error-prone data areas. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause...

GPAC multimedia platform Heap Buffer Overflow DoS

The vulnerability of the ilstitemRead function in the boxcodeapple.c component of the GPAC multimedia platform is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause service failures...

MP4Box Component Heap Buffer Overflow DoS

The vulnerability of the hevcparsevpsextension function in the MP4Box component of the GPAC multimedia platform is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failure...

CGAL Nef_S2/SNC_io parser.h Heap Buffer Overflow DoS

The vulnerability of the NefS2/SNCio parser.h component in the CGAL algorithm library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a...

OTRS Ticket Request System Confidential Data Access Data Compromise

The vulnerabilities in the components Kernel/Output/HTML/PreferencesCustomQueue.pm, Kernel/System/CustomerCompany.pm, Kernel/System/Ticket/IndexAccelerator/RuntimeDB.pm, Kernel/System/Ticket/IndexAccelerator/StaticDB.pm, and Kernel/System/TicketSearch.pm of the OTRS ticket request system are...

Singularity Container Insufficient Entropy

The vulnerability of the Singularity container platform is related to insufficient entropy. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

MdeModulePkg UEFI EDK2 Confidential Data Compromise

The vulnerability of the MdeModulePkg component in open-source development environments for UEFI EDK2 is related to insufficient input validation. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...

SIXEL Libsixel Encoder/Decoder Heap Buffer Overflow DoS

The vulnerability of the sixelencodehighcolor function in the tosixel.c component of the SIXEL Libsixel encoder/decoder implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...