a2d (>=0.1.0, <=0.1.11), acidalia (>=0.1.0, <=0.1.3) +182 more potentially affected by CVE-2021-45689 via gfx-auxil (>=0.1.0, <=0.9.0)

gfx-auxil CARGO version =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.5.4-rc.1, =0.1.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.1.0, =0.1.3 and more Source cves: CVE-2021-45689 Source advisory: OSV:GHSA-FF2R-XPWQ-6WHJ...

CVE-2021-45689

An issue was discovered in the gfx-auxil crate through 2021-01-07 for Rust. gfxauxil::readspirv may read from uninitialized memory locations...

CVE-2021-45689

An issue was discovered in the gfx-auxil crate through 2021-01-07 for Rust. gfxauxil::readspirv may read from uninitialized memory locations...

gfx-rs 安全漏洞

gfx-rs is gfx-rs is a low-level, cross-platform graphics and computation abstraction library in Rust. A security vulnerability exists in gfx-rs that stems from the fact that gfxauxil::readspirv can read data from uninitialized memory locations...

CVE-2021-45689

CVE-2021-45689 affects the Rust crate gfx-auxil . The function gfx_auxil::read_spirv may read from uninitialized memory, per the NVD entry (through 2021-01-07). Root cause is reading uninitialized memory in the read_spirv path. Impact is memory safety issues (undefined behavior) with potential pa...

CVE-2021-45689

An issue was discovered in the gfx-auxil crate through 2021-01-07 for Rust. gfxauxil::readspirv may read from uninitialized memory locations...

CVE-2021-39561

An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function Gfx::opSetFillColorN located in Gfx.cc. It allows an attacker to cause code Execution...

CVE-2021-39561

An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function Gfx::opSetFillColorN located in Gfx.cc. It allows an attacker to cause code Execution...

PDF2JSON Gfx::doShowText Denial of Service Vulnerability

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages to JSON and XML formats on a page-by-page basis. PDF2JSON Gfx::doShowText has a security vulnerability. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2020-19474

An issue has been found in function Gfx::doShowText in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Use After Free...

CVE-2020-19474

An issue has been found in function Gfx::doShowText in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Use After Free...

OSV-2021-315 Global-buffer-overflow in Gfx::decode_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30507 Crash type: Global-buffer-overflow READ 4 Crash state: Gfx::decodeframe Gfx::GIFImageDecoderPlugin::frame Gfx::GIFImageDecoderPlugin::bitmap...

a2d (>=0.1.0, <=0.1.11), acidalia (>=0.1.0, <=0.1.3) +203 more potentially affected by CVE-2021-45689 via gfx-auxil (>=0.1.0, <=0.10.0)

gfx-auxil CARGO version =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.5.4-rc.1, =0.1.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2021-45689 Source advisory: OSV:RUSTSEC-2021-0091...

serenity:FuzzGIFLoader: Global-buffer-overflow in Gfx::decode_frame

Detailed Report: https://oss-fuzz.com/testcase?key=6281737226944512 Project: serenity Fuzzing Engine: afl Fuzz Target: FuzzGIFLoader Job Type: aflasanserenity Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000784fb0 Crash State: Gfx::decodeframe...

serenity:FuzzBMPLoader: Heap-buffer-overflow in Gfx::Streamer::read_u8

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=6281654599155712 Project: serenity Fuzzing Engine: afl Fuzz Target: FuzzBMPLoader Job Type: aflasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6110000002...

serenity:FuzzBMP: Heap-buffer-overflow in Gfx::decode_bmp_pixel_data

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5380810148151296 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzBMP Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2020-2165 Use-of-uninitialized-value in isSameGfxColor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27523 Crash type: Use-of-uninitialized-value Crash state: isSameGfxColor Gfx::doAxialShFill Gfx::opShFill...

OSV-2020-1340 Use-of-uninitialized-value in Gfx::fillPatch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15395 Crash type: Use-of-uninitialized-value Crash state: Gfx::fillPatch Gfx::doPatchMeshShFill Gfx::doShadingPatternFill...

firefox security update

68.7.0-2.0.1.el81 - Rebuild to pickup Oracle default bookmarks Orabug: 30069264 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references Orabug: 30530527 68.7.0-2 - Update to 68.7.0 build3 68.6.1-1 - Update to 68.6.1 ESR Wed Mar 04 2020 Jan Hora...

poppler: memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc

An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo...