CVE-2022-28069

A heap buffer overflow in vaxopfunction in radare2 5.4.2 and 5.4.0...

CVE-2022-47069

p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp...

CVE-2022-47069

p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur...

CVE-2020-18382

Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlockwasm::Block in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-opt...

AZL-44271 CVE-2020-18768 affecting package openjpeg2 2.3.1-12

There exists one heap buffer overflow in TIFFmemcpy in tifunix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file...

CVE-2020-18382

Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlockwasm::Block in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-opt...

CVE-2020-18768

There exists one heap buffer overflow in TIFFmemcpy in tifunix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file...

CVE-2020-18768

There exists one heap buffer overflow in TIFFmemcpy in tifunix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file...

Denial Of Service (DoS)

chromium is vulnerable Denial Of Service DoS. The vulnerability exists due to the heap buffer overflow in Skia , which allows an attacker to exploit heap corruption via maliciously crafted HTML page through the renderer process...

Denial Of Service (DoS)

chromium is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap buffer overflow in ANGLE, which allows an attacker to exploit heap corruption via maliciously crafted HTML page...

OSV-2023-723 Heap-buffer-overflow in H5MM_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61626 Crash type: Heap-buffer-overflow WRITE Crash state: H5MMmemcpy H5Dscattermem H5Dscatgathread...

OSV-2023-722 Heap-buffer-overflow in H5MM_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61625 Crash type: Heap-buffer-overflow READ Crash state: H5MMmemcpy H5Ocachechkserialize H5Cgenerateimage...

CVE-2022-44840

Heap buffer overflow vulnerability in binutils readelf before 2.40 via function findsectioninset in file readelf.c...

CVE-2022-28068

CVE-2022-28068 affects radare2 5.4.0 and 5.4.2, due to a heap overflow in the r_sleb128 function. The vulnerability is confirmed by multiple sources in connected docs; a practical workaround is to disable the r_sleb128 function for versions 5.4.0–5.4.2 until a patch is released (per PT-2023-12931...

CVE-2020-18768

LibTIFF 4.0.10 has a heap-based buffer overflow in _TIFFmemcpy (tif_unix.c) that can cause denial of service when processing crafted TIFF files (CVE-2020-18768). Connected advisories (OpenVAS/Nessus) corroborate the vulnerability and list affected platforms; remediation is to upgrade to a newer L...

CVE-2021-33388

CVE-2021-33388 affects the dpic package: the 2021.04.10 release contains a Heap Buffer Overflow in the makevar() function (dpic.y) . CVSSv3.1 base score 9.8 (CRITICAL) with network attack vector, no user interaction. Several connected sources confirm the issue and note remediation status varies b...

CVE-2022-28069

CVE-2022-28069 affects radare2, specifically heap overflow in vax_opfunction for versions 5.4.0 and 5.4.2. Root cause reported as a heap buffer overflow in the vax_opfunction function. Public references consistently describe this vulnerability in radare2 5.4.0/5.4.2; no explicit fix version is pr...

CVE-2022-44840

CVE-2022-44840: A heap/denial-of-service vulnerability in GNU Binutils readelf.c (find_section_in_set) affects readelf up to version before 2.40. A locally authenticated attacker could craft input to trigger a heap-based buffer overflow, potentially causing a crash or denial of service. Public de...

CVE-2022-47069

p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur...

CVE-2022-45703

CVE-2022-45703 is a heap buffer overflow in GNU binutils' readelf tool (readelf.c, display_debug_section) affecting readelf before 2.40. The vulnerability could lead to arbitrary code execution or a crash per the description; the issue is addressed by upgrading to binutils 2.40 or newer. Exploita...