CVE-2024-46261

cutepng v1.05 was discovered to contain a heap buffer overflow via the cpmake32 function at cutepng.h...

CVE-2024-46264

CVE-2024-46264 affects the PNG parser in cute_png v1.05 , due to a heap buffer overflow in the function cp_find() in cute_png.h . CVSS v3.1 scores it at 7.8 (HIGH) with a LOCAL attack vector, LOW attack complexity, and NONE privileges required, but with USER INTERACTION required; impact to confid...

CVE-2024-46259

CVE-2024-46259 affects cute_png v1.05, with a heap buffer overflow in cp_unfilter() defined in cute_png.h. Reported impact: HIGH (CVSSv3.1 7.8), attack vector LOCAL, user interaction REQUIRED. A PoC is referenced in the provided metadata. No remediation details are present in the supplied documen...

CVE-2024-45993

A flaw was found in the GIFLIB project. Processing specially-crafted input may trigger a heap buffer overflow condition, which can cause a denial of service...

CVE-2024-45993

Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb...

CVE-2024-45993

Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb...

CVE-2024-45993

Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb...

CVE-2024-45993

Summary: CVE-2024-45993 affects Giflib Project v5.2.2 and is a heap buffer overflow via gif2rgb. Multiple connected sources (NVD entry, OSV/Ubuntu/Amazon Linux advisories and Red Hat/Nessus references) consistently describe a heap overflow condition in gif2rgb.c leading to memory corruption/denia...

CVE-2024-45993

Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb...

CVE-2024-45993

Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb...

CVE-2024-45993

Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb...

OSV-2024-1150 Heap-buffer-overflow in extract_mr_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=369236552 Crash type: Heap-buffer-overflow READ Crash state: extractmrdata parsemrstring readstatparsesav...

PT-2024-40586 · Git +1 · Readstat

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read crash has been reported. The crash occurs in the following functions: extract mr data, parse mr string, and readstat parse sa...

Heap Buffer Overflow

SQLite-vec is vulnerable to a Heap Buffer Overflow. The vulnerability is due to improper handling of memory allocation in the npytokennext function, which allows for a heap buffer overflow when processing certain crafted files...

CVE-2024-9029 Freeimage: heap buffer overflow in tiff_read_iptc_profile

A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the readiptcprofile function in the Source/Metadata/IPTC.cpp file because the size of the profile is not being sanitized, causing a crash in the application linked to the library,...

ROS-20240927-02

A vulnerability in the Google Chrome browser is related to the execution of certain user interface gestures Exploitation of the vulnerability could allow an attacker acting remotely to perform a spoofed the user interface using a specially crafted HTML page A vulnerability in Google Chrome browse...

OSV-2024-1145 Heap-buffer-overflow in ultrahdr::getYuv444Pixel

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538160 Crash type: Heap-buffer-overflow READ 1 Crash state: ultrahdr::getYuv444Pixel std::1::function::funcultrahdr::JpegR::applyGainMap ultrahdr::JpegR::applyGainMap...

GHSA-VRCX-GX3G-J3H8 Heap-based Buffer Overflow in sqlite-vec

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

CVE-2024-46488

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

sqlite-vec 安全漏洞

sqlite-vec is a SQLite extension from the individual developer Alex Garcia. A security vulnerability exists in sqlite-vec version v0.1.1, which stems from the presence of a heap buffer overflow that allows an attacker to cause a denial of service DoS via a crafted file...