OSV-2023-199 Global-buffer-overflow in xmlParseQName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57151 Crash type: Global-buffer-overflow READ 1 Crash state: xmlParseQName xmlParseStartTag2 xmlParseTryOrFinish...

OSV-2023-197 Global-buffer-overflow in base_C_MessageEncryptInit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57120 Crash type: Global-buffer-overflow READ 8 Crash state: baseCMessageEncryptInit rpcCMessageEncryptInit p11rpcserverhandle...

PT-2023-35713 · Git +1 · P11-Kit

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 8. The crash state involves functions such as base C MessageEncryptInit, r...

OSV-2023-195 Global-buffer-overflow in htmlParseDocument

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57089 Crash type: Global-buffer-overflow READ 1 Crash state: htmlParseDocument htmlDoRead htmlReadMemory...

OSV-2023-191 Global-buffer-overflow in xmlSkipBlankChars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57080 Crash type: Global-buffer-overflow READ 1 Crash state: xmlSkipBlankChars xmlParseMisc xmlParseDocument...

OSV-2023-185 Global-buffer-overflow in xmlNextChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57073 Crash type: Global-buffer-overflow READ 1 Crash state: xmlNextChar htmlParseStartTag htmlParseChunk...

PT-2023-35710 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves several functions: xmlParseContentInternal,...

PT-2023-35708 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves functions such as xmlSkipBlankChars,...

PT-2023-35695 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves functions such as htmlCurrentChar,...

OSV-2023-162 Global-buffer-overflow in xmlCurrentChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56841 Crash type: Global-buffer-overflow READ 1 Crash state: xmlCurrentChar xmlParseNCName xmlParseQName...

PT-2023-35691 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves functions such as xmlCurrentChar,...

OSV-2023-160 Global-buffer-overflow in OT::gvar::accelerator_t::apply_deltas_to_points

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56800 Crash type: Global-buffer-overflow READ 2 Crash state: OT::gvar::acceleratort::applydeltastopoints bool OT::glyfimpl::Glyph::getpoints bool OT::glyfimpl::Glyph::getpoints...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : SoX vulnerabilities (USN-5904-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5904-1 advisory. Helmut Grohne discovered that SoX incorrectly handled certain inputs. If a user or an automated system were tricked...

Debian DSA-5356-1 : sox - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5356 advisory. - A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsxreadwbuf in formatsi.c file. The vulnerability is exploitable with a crafte...

SUSE CVE-2017-7223

GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow of size 1 while attempting to unget an EOF character from the input stream, potentially leading to a program crash...

SUSE CVE-2020-21682

A global buffer overflow in the setfill component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service DOS via converting a xfig file into ge format...

SUSE CVE-2022-38236

XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObjObject at /xpdf/Lexer.cc...

FreeBSD : TightVNC -- Muliple Vulnerabilities (b34c1947-a749-11ed-b24b-1c61b4739ac9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b34c1947-a749-11ed-b24b-1c61b4739ac9 advisory. - TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, whic...

OSV-2023-48 Global-buffer-overflow in isvce_write_coeff4x4_cavlc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55643 Crash type: Global-buffer-overflow READ 1 Crash state: isvcewritecoeff4x4cavlc isvceencoderesidue isvcewritepslicembcavlc...

PT-2023-35869 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves several functions: isvce write coeff4x4 cavlc,...