The vulnerability of the nm.c and objdump.c components of the GNU Binutils development environment allows a hacker to gain access to confidential data, compromise their integrity, and cause service failures.

The vulnerability of the nm.c and objdump.c components of the GNU Binutils development environment is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of the `read_formatted_entries` function in the `dwarf2.c` component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the readformattedentries function in the dwarf2.c component of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure through the use of a specially created ELF file...

GPAC Security Vulnerabilities

GPAC is an open source multimedia framework. GPAC suffers from a security vulnerability that stems from the presence of a memory leak vulnerability that allows an attacker to cause a denial of service DoS via a crafted MP4 file...

The vulnerabilities of the input/output modules in the Rsyslog software utility for logging processing allow a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the input/output modules of the Rsyslog log processing software is related to insufficient handling of the format string. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the elf32-i386.c and elf64-x86-64.c components of the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the elf32-i386.c and elf64-x86-64.c components of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created ELF file...

The vulnerability of the decode_line_info function in the dwarf2.c component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the decodelineinfo function in the dwarf2.c component of the GNU Binutils development environment is related to reading data beyond the allowable buffer limits. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created ELF...

The vulnerability of the read_section function in the dwarf2.c component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the readsection function in the dwarf2.c component of the GNU Binutils development environment relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created ELF file...

Exploit for Classic Buffer Overflow in Apple Ipados

vulnerabilidad-LibWebP-CVE-2023-41064 longitudes de código par...

[SECURITY] Fedora 38 Update: python-pillow-9.5.0-1.fc38

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

Exploit for Out-of-bounds Write in Google Chrome

level 1: craft.c - bad.webp bash exist: docker 813b6b757...

The vulnerability of the H5Dchunk.c component in the HDF5 file processing library allows a attacker to cause a service failure.

The vulnerability of the H5Dchunk.c component in the HDF5 file processing library is related to the lack of checks for division by zero. Exploiting this vulnerability can allow a remote attacker to cause a service failure using a specially created HDF file...

The vulnerability of the yajl_string_decode function in the yajl_encode.c component of the YAJL-ruby library allows a attacker to cause a service failure.

The vulnerability of the yajlstringdecode function in the yajlencode.c component of the YAJL-ruby library is related to insufficient processing of the format string. Exploiting this vulnerability could allow a malicious actor to cause a service failure by using a specially created JSON file...

The vulnerability of the PDF component in the Google Chrome web browser allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the PDF component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially created PD...

The vulnerability of the PDF component in the Google Chrome web browser allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the PDF component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially created PD...

The vulnerability of the STST TA component in Samsung Teegris’ Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the STST TA component in Samsung Teegris’ Android operating system security system is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

OESA-2023-1811 GraphicsMagick security update

GraphicsMagick is the swiss army knife of image processing. Comprised of 267K physical lines according to David A. Wheeler's SLOCCount of source code in the base package or 1,225K including 3rd party libraries it provides a robust and efficient collection of tools and libraries which support...

PT-2024-2761

Name of the Vulnerable Software and Affected Versions Shim affected versions not specified Description The issue is related to a flaw in Shim when creating a new ESL variable. If Shim fails to create the new variable, it attempts to print an error message, but the number of parameters used by the...

The vulnerability of the Drawing SDK, a software development tool for engineering applications, relates to writing beyond the buffer boundaries in memory. This allows an attacker to execute arbitrary code.

The vulnerability of the Drawing SDK, a software development tool for engineering applications, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using specially crafted DXF files...

PT-2023-6973 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to insufficient input validation when processing FBX files, which can allow an attacker to execute arbitrary code. Recommendations: At the moment, there is no...

NewStart CGSL MAIN 6.06 : git Multiple Vulnerabilities (NS-SA-2023-0143)

The remote NewStart CGSL host, running version MAIN 6.06, has git packages installed that are affected by multiple vulnerabilities: - Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a...