Exploit for Classic Buffer Overflow in N-Prolog_Project N-Prolog

Description for CVE-2022-43343 N-Prolog v1.91 was discovered...

CVE-2022-43343

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...

CVE-2022-43343

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...

Buffer overflow

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...

CVE-2022-43343

CVE-2022-43343 concerns N-Prolog v1.91, where a global buffer overflow is reported in the function gettoken() at Main.c. The vulnerability is documented with a faulty write into a global buffer, as demonstrated by an AddressSanitizer report pointing to parser.c:1022 and noting proximity to global...

N-Prolog 安全漏洞

N-Prolog is an Arity/Prolog32-compatible interpreter and compiler from the individual developer kenichi sasagawa. A security vulnerability exists in N-Prolog v1.91, which stems from the inclusion of a global buffer overflow in the function gettoken in Main.c. The vulnerability is caused by the...

CVE-2022-43343

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...

PT-2022-26860 · N-Prolog · N-Prolog

Name of the Vulnerable Software and Affected Versions: N-Prolog version 1.91 Description: A global buffer overflow issue was found in the gettoken function at Main.c. Recommendations: For N-Prolog version 1.91, consider disabling the gettoken function as a temporary workaround until a patch is...

CVE-2022-43343

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...

CVE-2020-36405

Keystone Engine 0.9.2 has a use-after-free in llvmks::X86Operand::getToken...

CVE-2020-36405

Keystone Engine 0.9.2 has a use-after-free in llvmks::X86Operand::getToken...

Design/Logic Flaw

Keystone Engine 0.9.2 has a use-after-free in llvmks::X86Operand::getToken...

CVE-2020-36405

Keystone Engine 0.9.2 has a use-after-free in llvmks::X86Operand::getToken...

CVE-2020-36405

CVE-2020-36405 concerns Keystone Engine v0.9.2, where a use-after-free bug occurs in llvm_ks::X86Operand::getToken. The NVD entry reports a CVSS 3.1 base score of 7.8 (HIGH) with LOCAL attack vector, no privileges required, but user interaction required, and impacts on confidentiality, integrity,...

Pixar OpenUSD binary file format index type values information leak vulnerability

Talos Vulnerability Report TALOS-2020-1105 Pixar OpenUSD binary file format index type values information leak vulnerability November 12, 2020 CVE Number CVE-2020-13498,CVE-2020-13496,CVE-2020-13497 SUMMARY An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain...

OSV-2020-789 Heap-use-after-free in llvm_ks::X86Operand::getToken

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22850 Crash type: Heap-use-after-free READ 4 Crash state: llvmks::X86Operand::getToken X86AsmParser::MatchAndEmitATTInstruction X86AsmParser::MatchAndEmitInstruction...

keystone:fuzz_asm_x86_16: Heap-use-after-free in llvm_ks::X86Operand::getToken

Detailed Report: https://oss-fuzz.com/testcase?key=5637154293415936 Project: keystone Fuzzing Engine: afl Fuzz Target: fuzzasmx8616 Job Type: aflasankeystone Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x60d000000a28 Crash State: llvmks::X86Operand::getToken...

CVE-2018-19842

getToken in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service stack-based buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...

UBUNTU-CVE-2018-19842

getToken in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service stack-based buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...

radare2 'getToken' function denial of service vulnerability

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'getToken' function in the libr/asm/p/asmx86nz.c file in radare2 versions prior to 3.1.0. An attacker can exploit this vulnerability to cause a denial of service stack buffer out-of-bound...