Vim 安全漏洞

Vim is a cross-platform text editor from the Vim open source. A security vulnerability exists in Vim versions prior to 9.1.1003, which stems from failing to properly end visual mode when switching with the :all command in visual mode, which can result in a heap buffer overflow...

Fedora 40 : libxmp (2025-c58133e520)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c58133e520 advisory. Latest upstream release. Changelog: Fixes: CVE-2023-45679: Attempt to free an uninitialized memory pointer in vorbisdeinit CVE-2023-45680: Null...

USN-7198-1 rlottie vulnerabilities

Paolo Giai discovered a series of stack-based overflow vulnerabilities in the blit and grayrendercubic functions of a custom fork of the rlottie library. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS...

Google Android lwis_ioctl.c Heap Buffer Overflow Vulnerability

Google Android is a Linux-based open source operating system developed by Google Inc. in the United States. Google Android suffers from a security vulnerability that originates from a heap buffer overflow in the constructtransactionfromcmd function of the lwisioctl.c file, which may have...

SUSE: Security Advisory (SUSE-SU-2025:0040-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-23016

FastCGI fcgi2 aka fcgi 2.x through 2.4.4 has an integer overflow and resultant heap-based buffer overflow via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c...

SUSE SLES12 Security Update : openjpeg2 (SUSE-SU-2025:0040-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:0040-1 advisory. - CVE-2024-56826: Fixed heap buffer overflow in bin/common/color.c bsc1235029 Tenable has extracted the preceding description block directly from the...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : openjpeg2 (SUSE-SU-2025:0044-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0044-1 advisory. - CVE-2024-56826: Fixed heap buffer overflow in bin/common/color.c bsc1235029 Tenable has extracted the...

Security update for openjpeg2

This update for openjpeg2 fixes the following issues: CVE-2024-56826: Fixed heap buffer overflow in bin/common/color.c bsc1235029 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

SUSE-SU-2025:0044-1 Security update for openjpeg2

This update for openjpeg2 fixes the following issues: - CVE-2024-56826: Fixed heap buffer overflow in bin/common/color.c bsc1235029...

SUSE-SU-2025:0040-1 Security update for openjpeg2

This update for openjpeg2 fixes the following issues: - CVE-2024-56826: Fixed heap buffer overflow in bin/common/color.c bsc1235029...

CVE-2024-56827

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opjdecompress utility. This can lead to an application crash or other undefined behavior...

CVE-2024-56826

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opjdecompress utility. This can lead to an application crash or other undefined behavior...

AZL-55451 CVE-2024-56827 affecting package openjpeg2 2.3.1-12

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opjdecompress utility. This can lead to an application crash or other undefined behavior...

CVE-2024-56827 Openjpeg: heap buffer overflow in lib/openjp2/j2k.c

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opjdecompress utility. This can lead to an application crash or other undefined behavior...

CVE-2024-56827

Summary: CVE-2024-56827 affects the OpenJPEG/OpenJPEG2 library. The connected advisories describe a heap buffer overflow in OpenJPEG components (notably lib/openjp2/j2k.c) that can be triggered under certain options when decoding JPEG 2000 images, potentially causing a crash or undefined behavior...

CVE-2024-56827

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opjdecompress utility. This can lead to an application crash or other undefined behavior...

CVE-2024-56827 Openjpeg: heap buffer overflow in lib/openjp2/j2k.c

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opjdecompress utility. This can lead to an application crash or other undefined behavior...

CVE-2024-56826

OpenJPEG CVE-2024-56826 affects the openjpeg2 library, with a heap buffer overflow that can be triggered when using opj_decompress. Affected code paths are specifically in bin/common/color.c and lib/openjp2/j2k.c, per multiple security advisories. Impact is described as potential application cras...

CVE-2024-56826 Openjpeg: heap buffer overflow in bin/common/color.c

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opjdecompress utility. This can lead to an application crash or other undefined behavior...