21199 matches found
OSV-2023-509 Heap-buffer-overflow in ndpi_search_thrift_tcp_udp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60070 Crash type: Heap-buffer-overflow WRITE Crash state: ndpisearchthrifttcpudp checkndpidetectionfunc ndpicheckflowfunc...
PT-2023-35882 · Git +1 · Ndpi
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow write crash. The crash involves functions such as ndpi search thrift tcp udp, check ndpi detection func, a...
PT-2023-35884 · Uofs · Uofs
Name of the Vulnerable Software and Affected Versions: uofs affected versions not specified Description: The issue is related to a heap-buffer-overflow read, which occurs in the uofs component. Specifically, the crash happens in the pdfi find cff index and pdfi read cff font functions...
OSV-2023-508 Heap-buffer-overflow in AffixMgr::compound_check
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60034 Crash type: Heap-buffer-overflow READ 1 Crash state: AffixMgr::compoundcheck AffixMgr::compoundcheck AffixMgr::compoundcheck...
PT-2023-35880 · Git +1 · Ntopng
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the IEC104Stats::processPacket function,...
PT-2023-35881 · Git +1 · Hunspell
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by an OSS-Fuzz report. The crash state involves repeated calls to the AffixMgr::compoun...
CVE-2023-36271
LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitwcs2nlen at bits.c...
CVE-2023-36273
LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bitcalcCRC at bits.c...
CVE-2023-36274
LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitwriteTF at bits.c...
CVE-2023-36273
LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bitcalcCRC at bits.c...
Heap overflow
LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bitwcs2nlen at bits.c...
CVE-2023-36192
Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capturewscheckpacket at /src/capture.c...
Heap overflow
Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguityerror component at /src/clp.c...
CVE-2023-36192
Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capturewscheckpacket at /src/capture.c...
CVE-2023-36271
CVE-2023-36271 affects LibreDWG, with a heap buffer overflow in the function bit_wcs2nlen implemented in bits.c, impacting versions from 0.10 up to 0.12.5 . The root cause is a memory safety issue in the bit_wcs2nlen routine that can overflow a heap buffer. Impact is described as a high-severity ...
CVE-2023-36274
LibreDWG vulnerability CVE-2023-36274 affects LibreDWG v0.11 through v0.12.5, caused by a heap buffer overflow in the bit_write_TF function (bits.c). Impact details in the sources indicate such overflow could lead to memory corruption. Public-fix references show OpenSUSE backport/update to 0.12.5...
CVE-2023-36193
Gifsicle v1.9.3 is affected by a heap buffer overflow in the ambiguity_error path (src/clp.c). Multiple trusted sources (OSV entries and OpenSUSE advisories) confirm a fix was released in version 1.94 to address CVE-2023-36193; the SUSE/openSUSE advisory explicitly notes the fix for this vulnerab...
Gifsicle 缓冲区错误漏洞
gifsicle is Gifsicle handles GIF image files. A security vulnerability exists in Gifsicle version 1.9.3, which stems from the component ambiguityerror containing a heap buffer overflow vulnerability...