CVE-2021-32288

CVE-2021-32288 affects the HEIF project up to version 3.6.2. The issue is a global-buffer-overflow in the function HevcDecoderConfigurationRecord::getPicHeight() in hevcdecoderconfigrecord.cpp, allowing an attacker to achieve code execution. The connected documents confirm the vulnerability class...

CVE-2021-32286

An issue was discovered in hcxtools through 6.1.6. A global-buffer-overflow exists in the function pcapngoptionwalk located in hcxpcapngtool.c. It allows an attacker to cause code Execution...

CVE-2021-32265

The CVE-2021-32265 entry concerns Bento4 up to v1.6.0-637, where a global-buffer-overflow in AP4_MemoryByteStream::WritePartial() (Ap4ByteStream.cpp) could lead to code execution or information disclosure. The connected sources consistently describe the same underlying flaw but do not provide ven...

SUSE SLES12 Security Update : transfig (SUSE-SU-2021:3124-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3124-1 advisory. Update to version 3.2.8, including fixes for - CVE-2021-3561: overflow in fig2dev/read.c in function readcolordef bsc1186329. -...

ALPINE-CVE-2020-21596

libde265 v1.0.4 contains a global buffer overflow in the decodeCABACbit function, which can be exploited via a crafted a file...

DEBIAN-CVE-2020-21534

fig2dev 3.2.7b contains a global buffer overflow in the getline function in read.c...

DEBIAN-CVE-2020-21532

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c...

DEBIAN-CVE-2020-21531

fig2dev 3.2.7b contains a global buffer overflow in the convpatternindex function in gencgm.c...

CVE-2020-21534

fig2dev 3.2.7b contains a global buffer overflow in the getline function in read.c...

Buffer overflow

fig2dev 3.2.7b contains a global buffer overflow in the convpatternindex function in gencgm.c...

UBUNTU-CVE-2020-21532

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c...

CVE-2020-21534

Summary (CVE-2020-21534) fig2dev 3.2.7b contains a global buffer overflow in the get_line function (read.c). The vulnerability is discussed in multiple advisories across Linux distros (Ubuntu, Debian, openSUSE/openSUSE-SU-2021:1481-1, SUSE/openSUSE patches). Affected component is the fig2dev util...

fig2dev 缓冲区错误漏洞

fig2dev is used to convert .fig files to various graphics languages and formats. A global buffer overflow vulnerability exists in the convpatternindex function in gencgm.c in fig2dev version 3.2.7b. No detailed vulnerability details are currently available...

CVE-2020-21531

CVE-2020-21531 affects fig2dev, specifically a global buffer overflow in conv_pattern_index() of gencgm.c in version 3.2.7b. Connected advisories confirm multiple OS vendors (Debian, Ubuntu, openSUSE/SUSE, Red Hat via Nessus notes) referencing fig2dev vulnerabilities and provide fixes in newer re...

OSV-2021-1216 Global-buffer-overflow in fr_is_base16_nstd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38283 Crash type: Global-buffer-overflow READ 1 Crash state: frisbase16nstd frbase16decodenstd frvalueboxfromstr...

CVE-2020-18771

Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmnint.cpp which can result in an information leak...

CVE-2020-21682

A global buffer overflow in the setfill component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service DOS via converting a xfig file into ge format...

CVE-2020-21683

A global buffer overflow in the shadeortintnameafterdeclarecolor in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service DOS via converting a xfig file into pstricks format...

DEBIAN-CVE-2020-21682

A global buffer overflow in the setfill component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service DOS via converting a xfig file into ge format...

UBUNTU-CVE-2020-21678

A global buffer overflow in the genmpwritefontmacrolatex component in genmp.c of fig2dev 3.2.7b allows attackers to cause a denial of service DOS via converting a xfig file into mp format...