Artifex Software MuPDF 数字错误漏洞

Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A security vulnerability exists in Artifex Software MuPDF, which stems from a floating point exception divisible by 0 in the 0 width page of its muraster.c component...

CVE-2021-23210

A floating point exception divide-by-zero issue was discovered in SoX in functon readsamples of voc.c file. An attacker with a crafted file, could cause an application to crash...

CVE-2021-33844

A floating point exception divide-by-zero issue was discovered in SoX in functon startread of wav.c file. An attacker with a crafted wav file, could cause an application to crash...

CVE-2020-27802

An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27802

An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

DEBIAN-CVE-2020-27802

An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

UBUNTU-CVE-2020-27802

An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

Code injection

A floating point exception divide-by-zero issue was discovered in SoX in functon startread of wav.c file. An attacker with a crafted wav file, could cause an application to crash...

CVE-2020-27802

An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

Code injection

A floating point exception divide-by-zero issue was discovered in SoX in functon readsamples of voc.c file. An attacker with a crafted file, could cause an application to crash...

CVE-2020-27802

CVE-2020-27802 affects UPX 4.0.0 and is triggered by processing a crafted Mach-O file, causing a floating point exception in the elf_lookup function (p_lx_elf.cpp). The connected sources confirm the vulnerable component and the root cause (unhandled input in elf_lookup for Mach-O files). No expli...

CVE-2020-27802

An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27802

An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2021-23210

The CVE-2021-23210 issue affects SoX and is caused by a floating point divide-by-zero in read_samples() (voc.c). A crafted input file could cause an application crash. Connected advisories confirm multiple vendor patches exist: Mageia, Debian, Ubuntu, and other distributions have released updates...

CVE-2021-33844

A floating point exception divide-by-zero issue was discovered in SoX in functon startread of wav.c file. An attacker with a crafted wav file, could cause an application to crash...

CVE-2021-33844

CVE-2021-33844 is a SoX vulnerability: a floating point divide-by-zero in wav.c:startread() can crash an application when processing a crafted WAV file. The connected advisories confirm this issue across multiple distributions and note vulnerable SoX versions. In Amazon Linux 2, the fix is delive...

CVE-2021-33844

A floating point exception divide-by-zero issue was discovered in SoX in functon startread of wav.c file. An attacker with a crafted wav file, could cause an application to crash...

SoX 数字错误漏洞

SoX is a set of open source audio processing tools. The product supports playing, converting and recording audio in multiple formats. A security vulnerability exists in SoX, which stems from a floating point exception in the startread function of its wav.c component that causes the application to...

UPX 数字错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which stems from an attacker being able to cause a floating-point exception in the elflookup function of its plxelf.cpp component via a carefully crafted Mach-O file...

CVE-2020-27790

A floating point exception issue was discovered in UPX in PackLinuxElf64::invertptdynamic function of plxelf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service. The highest impact is to Availability...