984 matches found
CVE-2024-27935: Exposure of Data Element to Wrong Session
Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.35.1 and prior to version 1.36.3, a vulnerability in Deno's Node.js compatibility runtime allows for cross-session data contamination during simultaneous asynchronous reads from Node.js streams sourced from sockets o...
Deno's Node.js Compatibility Runtime has Cross-Session Data Contamination
Summary A vulnerability in Deno's Node.js compatibility runtime allows for cross-session data contamination during simultaneous asynchronous reads from Node.js streams sourced from sockets or files. The issue arises from the re-use of a global buffer BUF in streamwrap.ts used as a performance...
GHSA-WRQV-PF6J-MQJP Deno's Node.js Compatibility Runtime has Cross-Session Data Contamination
Summary A vulnerability in Deno's Node.js compatibility runtime allows for cross-session data contamination during simultaneous asynchronous reads from Node.js streams sourced from sockets or files. The issue arises from the re-use of a global buffer BUF in streamwrap.ts used as a performance...
PT-2024-22149 · Deno · Deno
Name of the Vulnerable Software and Affected Versions: Deno versions 1.35.1 through 1.36.2 Description: A vulnerability in Deno's Node.js compatibility runtime allows for cross-session data contamination during simultaneous asynchronous reads from Node.js streams sourced from sockets or files. Th...
openSUSE: Security Advisory for libxml2 (SUSE-SU-2023:3699-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
inchi:inchi_input_fuzzer: Global-buffer-overflow in OAD_Polymer_SetAtProps
Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=4675082079240192 Project: inchi Fuzzing Engine: libFuzzer Fuzz Target: inchiinputfuzzer Job Type: libfuzzerasaninchi Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...
PT-2024-40640 · Git +1 · Igraph
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a global buffer overflow read. The crash occurs in the following functions: igraph dl yylex, igraph dl yyparse,...
CVE-2024-25165
A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex...
UBUNTU-CVE-2024-25165
A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex...
CVE-2024-25165
A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex...
PT-2024-20793 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools version 0.9.2 Description: A global-buffer-overflow issue was found in the function LineText at lib/swf5compiler.flex. Recommendations: For SWFTools version 0.9.2, consider disabling the LineText function in lib/swf5compiler.flex as ...
CVE-2024-25165
A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex...
OSV-2024-64 Global-buffer-overflow in ReadVariantArrayBuiltInType
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66311 Crash type: Global-buffer-overflow READ 8 Crash state: ReadVariantArrayBuiltInType SOPCVariantReadInternal SOPCEncodeableObjectDecode...
GLSA-202401-32 : libaom: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202401-32 libaom: Multiple Vulnerabilities - AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aomimage.c. CVE-2020-36129 - AOM v2.0.1 was discovered to contain a NULL pointer dereference via the...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : libde265 vulnerabilities (USN-6617-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6617-1 advisory. It was discovered that libde265 could be made to write out of bounds. If a user or automated system were tricked into opening a...
gpac:fuzz_probe_analyze: Global-buffer-overflow in gf_mp3_bit_rate
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4759642446036992 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000001af8aac Crash Stat...
opensc:fuzz_pkcs11: Global-buffer-overflow in asn1_free_ec_params
Detailed Report: https://oss-fuzz.com/testcase?key=6292910257537024 Project: opensc Fuzzing Engine: afl Fuzz Target: fuzzpkcs11 Job Type: aflasanopensc Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x000000d9dea8 Crash State: asn1freeecparams scasn1clearalgorithmid...
CVE-2024-22912
A global-buffer-overflow was found in SWFTools v0.9.2, in the function countline at swf5compiler.flex:327. It allows an attacker to cause code execution...
