CVE-2021-32288

CVE-2021-32288 affects the HEIF project up to version 3.6.2. The issue is a global-buffer-overflow in the function HevcDecoderConfigurationRecord::getPicHeight() in hevcdecoderconfigrecord.cpp, allowing an attacker to achieve code execution. The connected documents confirm the vulnerability class...

CVE-2021-32286

An issue was discovered in hcxtools through 6.1.6. A global-buffer-overflow exists in the function pcapngoptionwalk located in hcxpcapngtool.c. It allows an attacker to cause code Execution...

CVE-2021-32265

The CVE-2021-32265 entry concerns Bento4 up to v1.6.0-637, where a global-buffer-overflow in AP4_MemoryByteStream::WritePartial() (Ap4ByteStream.cpp) could lead to code execution or information disclosure. The connected sources consistently describe the same underlying flaw but do not provide ven...

Gaming Industry Paves the Way

Currently at $200 billion per year and growing, the gaming industry has grown from humble beginnings in the 1930s during which games like Baffle Ball and pinball were considered a degenerate form of leisure that would lead young men into lives of sin into a massive global phenomenon widely seen a...

CVE-2021-23442

This affects all versions of package @cookiex/deep. The global proto object can be polluted using the proto object...

CVE-2021-23442

This affects all versions of package @cookiex/deep. The global proto object can be polluted using the proto object...

Code injection

This affects all versions of package @cookiex/deep. The global proto object can be polluted using the proto object...

CVE-2021-23442 Prototype Pollution

This affects all versions of package @cookiex/deep. The global proto object can be polluted using the proto object...

CVE-2021-23442

This affects all versions of package @cookiex/deep. The global proto object can be polluted using the proto object...

SUSE SLES12 Security Update : transfig (SUSE-SU-2021:3124-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3124-1 advisory. Update to version 3.2.8, including fixes for - CVE-2021-3561: overflow in fig2dev/read.c in function readcolordef bsc1186329. -...

Cookiex-Deep 安全漏洞

Cookiex-Deep is a library. It is used to add object recursion to a target. Cookiex-Deep has a security vulnerability that can be exploited by an attacker to cause proto objects to contaminate global proto objects...

ALPINE-CVE-2020-21596

libde265 v1.0.4 contains a global buffer overflow in the decodeCABACbit function, which can be exploited via a crafted a file...

DEBIAN-CVE-2020-21534

fig2dev 3.2.7b contains a global buffer overflow in the getline function in read.c...

DEBIAN-CVE-2020-21532

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c...

DEBIAN-CVE-2020-21531

fig2dev 3.2.7b contains a global buffer overflow in the convpatternindex function in gencgm.c...

CVE-2020-21534

fig2dev 3.2.7b contains a global buffer overflow in the getline function in read.c...

Buffer overflow

fig2dev 3.2.7b contains a global buffer overflow in the convpatternindex function in gencgm.c...

UBUNTU-CVE-2020-21532

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c...

UBUNTU-CVE-2020-21531

fig2dev 3.2.7b contains a global buffer overflow in the convpatternindex function in gencgm.c...

CVE-2020-21534

Summary (CVE-2020-21534) fig2dev 3.2.7b contains a global buffer overflow in the get_line function (read.c). The vulnerability is discussed in multiple advisories across Linux distros (Ubuntu, Debian, openSUSE/openSUSE-SU-2021:1481-1, SUSE/openSUSE patches). Affected component is the fig2dev util...