Lucene search
+L

135 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 4:40 a.m.•14 views

SUSE CVE-2017-13757

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to elfi386getsyntheticsymtab...

5.3CVSS6.8AI score0.01473EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2023/02/15 4:20 a.m.•7 views

SUSE CVE-2018-20861

libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files...

2.8CVSS7AI score0.01141EPSS
SaveExploits0References6
OSV
OSV
•added 2022/09/01 6:15 p.m.•10 views

UBUNTU-CVE-2020-35530

In LibRaw, there is an out-of-bounds write vulnerability within the "newnode" function libraw\src\x3f\x3futilspatched.cpp that can be triggered via a crafted X3F file...

5.5CVSS6AI score0.00389EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2022/08/24 12:00 a.m.•18 views

The vulnerability of the decompress.c component in the HDF5 libhdf5 library allows a hacker to execute arbitrary code on the target system.

The vulnerability of the decompress.c component in the HDF5 libhdf5 library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the target system by having the user open a specially created malicious GIF...

7.8CVSS7.9AI score0.00619EPSS
SaveExploits1References6Affected Software4
attackerkb
attackerkb
•added 2022/06/14 11:15 a.m.•12 views

CVE-2021-40633

A memory leak out-of-memory in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file...

8.8CVSS7.3AI score0.01717EPSS
SaveExploits1References2
OSV
OSV
•added 2022/06/14 11:15 a.m.•8 views

ALPINE-CVE-2021-40633

A memory leak out-of-memory in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file...

8.8CVSS6.9AI score0.01717EPSS
SaveExploits1References1
Prion
Prion
•added 2022/06/14 11:15 a.m.•31 views

Memory corruption

A memory leak out-of-memory in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file...

5.1CVSS8.4AI score0.01717EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/06/14 10:22 a.m.•3 views

CVE-2021-40633

A memory leak out-of-memory in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file...

8.8CVSS0.01717EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
•added 2022/06/14 10:22 a.m.•61 views

CVE-2021-40633

A memory leak out-of-memory in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file...

8.8CVSS8.4AI score0.01717EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/14 12:00 a.m.•6 views

CVE-2021-40633: Missing Release of Memory after Effective Lifetime

A memory leak out-of-memory in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file...

8.8CVSS7.5AI score0.01717EPSS
SaveExploits1References2
GitLab Advisory Database
GitLab Advisory Database
•added 2022/06/14 12:00 a.m.•42 views

Missing Release of Memory after Effective Lifetime

A memory leak out-of-memory in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file...

8.8CVSS5.9AI score0.01717EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/02/01 12:00 a.m.•22 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this...

7.8CVSS7.6AI score0.11613EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/10/04 12:00 a.m.•18 views

Gclib 缓冲区错误漏洞

Gclib is a C library. genome of reusable code for bioinformatics projects. a security vulnerability exists in GCLib, which could be exploited by an attacker to cause segmentation errors or possibly have unspecified other effects via a crafted GFF file...

8.8CVSS6AI score0.01069EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•17 views

The vulnerability of the GdkPixbuf image loading library, related to writing beyond the buffer’s boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the GdkPixbuf image loading library is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through the use of a specially create...

8.8CVSS7.9AI score0.02346EPSS
SaveExploits0References5Affected Software3
attackerkb
attackerkb
•added 2021/07/12 2:15 p.m.•10 views

CVE-2020-7872

DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed format file that is mishandled by DaviewIndy. Attackers could exploit this and arbitrary code execution...

7.8CVSS7.8AI score0.00862EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2021/07/12 12:00 a.m.•6 views

PT-2021-12693

Name of the Vulnerable Software and Affected Versions: DaviewIndy versions 8.98.7.0 and earlier Description: The issue is triggered when a user opens a malformed format file that is mishandled by DaviewIndy, leading to an integer overflow. This could allow attackers to exploit the issue and achie...

7.8CVSS0.00862EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/12 12:00 a.m.•13 views

CVE-2020-7872: Integer Overflow or Wraparound

DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed format file that is mishandled by DaviewIndy. Attackers could exploit this and arbitrary code execution...

7.8CVSS6.2AI score0.00862EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/06/09 12:00 a.m.•12 views

The vulnerability of the ksys2.dll library in the KOMPAS-3D 3D modeling system, which is related to the execution of operations outside the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the K2dobj.dl library in the COMPAS-3D 3D modeling system relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using the pre-viewing function for a specially crafted SPW...

4.9CVSS5.9AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/09 12:00 a.m.•14 views

The vulnerability of the ksys2.dll library in the KOMPAS-3D 3D modeling system, which is related to the execution of operations outside the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the ksys2.dll library in the KOMPAS-3D three-dimensional modeling system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted CDW format file...

4.9CVSS5.9AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/09 12:00 a.m.•9 views

The vulnerability of the ksys2.dll library in the KOMPAS-3D 3D modeling system, which is related to the execution of operations outside the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the ksys2.dll library in the KOMPAS-3D three-dimensional modeling system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted CDW format file...

4.9CVSS5.9AI score
SaveExploits0Affected Software1
Rows per page
Query Builder