CVE-2024-42477: Out-of-bounds Read

llama.cpp provides LLM inference in C/C++. The unsafe type member in the rpctensor structure can cause global-buffer-overflow. This vulnerability may lead to memory data leakage. The vulnerability is fixed in b3561...

PT-2024-29973

Name of the Vulnerable Software and Affected Versions llama.cpp version b3561 and earlier Description The issue arises from the unsafe type member in the rpc tensor structure, which can cause a global-buffer-overflow. This may lead to memory data leakage. Recommendations For versions prior to...

ffmpeg:ffmpeg_AV_CODEC_ID_SNOW_fuzzer: Global-buffer-overflow in sad_hpel_motion_search

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5476592894148608 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSNOWfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash...

RHEL 7 : optipng (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - optipng: heap buffer overflow in the bmpreadrows function CVE-2016-3981 - optipng: heap buffer overflow i...

RHEL 7 : transfig (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - transfig: Buffer underwrite in read.c:getline via crafted FIG file CVE-2018-16140 - An array index error ...

RHEL 6 : transfig (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - transfig: Buffer underwrite in read.c:getline via crafted FIG file CVE-2018-16140 - An array index error ...

GHSA-HH39-VJV8-J337 pywasm3 contains a global buffer overflow which leads to segmentation fault

wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function "PreserveRegisterIfOccupied" in wasm3/source/m3compile.c...

PYSEC-2024-309

wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function "PreserveRegisterIfOccupied" in wasm3/source/m3compile.c...

PYSEC-2024-309

wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function "PreserveRegisterIfOccupied" in wasm3/source/m3compile.c...

CVE-2024-34252

The wasm3 runtime, specifically version v0.5.0 , is susceptible to a global buffer overflow vulnerability. The flaw is located within the PreserveRegisterIfOccupied function in the wasm3/source/m3_compile.c file. This vulnerability can lead to a segmentation fault , potentially impacting the avai...

CVE-2024-34252

wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function "PreserveRegisterIfOccupied" in wasm3/source/m3compile.c...

libtsm:libtsm_fuzzer: Global-buffer-overflow in vte_write_debug

Detailed Report: https://oss-fuzz.com/testcase?key=4593511409188864 Project: libtsm Fuzzing Engine: libFuzzer Fuzz Target: libtsmfuzzer Job Type: libfuzzerasanlibtsm Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x5aa755e138d0 Crash State: vtewritedebug dotrans...

openweave:FuzzCertificateConversion: Global-buffer-overflow in nl::Weave::TLV::TLVWriter::WriteData

Detailed Report: https://oss-fuzz.com/testcase?key=4551760669638656 Project: openweave Fuzzing Engine: libFuzzer Fuzz Target: FuzzCertificateConversion Job Type: libfuzzerasanopenweave Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address: 0x5b656a8a0fe0 Crash State:...

ffmpeg:ffmpeg_dem_IAMF_fuzzer: Global-buffer-overflow in av_channel_layout_copy

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4554553191104512 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemIAMFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address: 0x000000df8ae8 Cras...

wireshark:fuzzshark_ip: Global-buffer-overflow in dissect_osi_options

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=4831107913678848 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

CVE-2024-27935

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.35.1 and prior to version 1.36.3, a vulnerability in Deno's Node.js compatibility runtime allows for cross-session data contamination during simultaneous asynchronous reads from Node.js streams sourced from sockets o...

libxml2: crafted xml can cause global buffer overflow

A flaw was found in Libxml2, where it contains a global buffer overflow via the xmlSAX2StartElement function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a denial of service DoS by supplying a crafted XML file...

PT-2024-40665 · Git +1 · Wireshark

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow WRITE 4. The crash state involves several functions: dissect dns answer, dissec...

wireshark:fuzzshark_udp_port-dns: Global-buffer-overflow in dissect_dns_answer

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=5193984974585856 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkudpport-dns Job Type: libfuzzerasanwireshark Platform Id: linux...

CVE-2024-27935 Deno's Node.js Compatibility Runtime has Cross-Session Data Contamination

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.35.1 and prior to version 1.36.3, a vulnerability in Deno's Node.js compatibility runtime allows for cross-session data contamination during simultaneous asynchronous reads from Node.js streams sourced from sockets o...