RHEL 8 : libwebp (RHSA-2023:5189)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5189 advisory. The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital...

RHEL 9 : firefox (RHSA-2023:5205)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:5205 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

OSV-2023-870 Heap-buffer-overflow in icu_74::SimpleDateFormat::subFormat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62432 Crash type: Heap-buffer-overflow READ 4 Crash state: icu74::SimpleDateFormat::subFormat icu74::SimpleDateFormat::format icu74::SimpleDateFormat::format...

OSV-2023-869 Heap-buffer-overflow in Assimp::MD5::MD5MeshParser::MD5MeshParser

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62441 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5MeshParser::MD5MeshParser Assimp::MD5Importer::LoadMD5MeshFile Assimp::MD5Importer::InternReadFile...

Debian dla-3569 : thunderbird - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3569 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3569-1 [email protected] https://www.debian.org/lts/security/...

PT-2023-36019 · Icu · Icu

Name of the Vulnerable Software and Affected Versions: icu 74 affected versions not specified Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash indicate it occurs in the icu 74::SimpleDateFormat class, specifically in the subFormat, format,...

GLSA-202309-05 : WebP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202309-05 WebP: Multiple vulnerabilities - There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to free best.bw and assign best = trial pointer. The second...

Debian DSA-5498-1 : thunderbird - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5498 advisory. A buffer overflow in parsing WebP images may result in the execution of arbitrary code. For the oldstable distribution bullseye, this problem has been fixed in versio...

Debian dla-3568 : firefox-esr - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3568 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3568-1 [email protected] https://www.debian.org/lts/security/...

PT-2023-36018 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the Assimp::MD5::MD5MeshParser::MD5MeshParser function, which is called by Assimp::MD5Importer::LoadMD5MeshFile and...

SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2023:3626-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3626-1 advisory. Firefox Extended Support Release 115.2.1 ESR bsc1215245. - CVE-2023-4863: Fixed heap buffer overflow in libwebp MFSA 2023-40 bsc1215231...

SUSE SLES15: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2023:3609-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3609-1 advisory. Firefox Extended Support Release 115.2.1 ESR bsc1215245. - CVE-2023-4863: Fixed heap buffer overflow in libwebp MFSA 2023-40 bsc1215231...

SUSE SLED15: MozillaFirefox / MozillaFirefox-branding-upstream / etc (SUSE-SU-2023:3610-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3610-1 advisory. Firefox Extended Support Release 115.2.1 ESR bsc1215245. - CVE-2023-4863: Fixed heap buffer overflow in...

openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0247-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0247-1 advisory. - Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted...

OSV-2023-850 Heap-buffer-overflow in bit_TV_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62363 Crash type: Heap-buffer-overflow WRITE 1 Crash state: bitTVtoutf8 jsoncquote dwgjsonLAYOUTprivate...

SUSE-SU-2023:3626-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.2.1 ESR bsc1215245. - CVE-2023-4863: Fixed heap buffer overflow in libwebp MFSA 2023-40 bsc1215231. The following non-security bug was fixed: - Fix i586 build by reducing debug info to -g1 bsc1210168...

Heap Buffer Overflow

libwebp.so is vulnerable to Out Of Bounds Memory Write. The vulnerability is due to the BuildHuffmanTable function in src/dec/vp8ldec.c improperly allocating memory to the table when parsing a stream, which results in an application crash or Arbitrary Code Execution when reading a crafted webp...

OESA-2023-1653 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

SUSE-SU-2023:3610-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.2.1 ESR bsc1215245. - CVE-2023-4863: Fixed heap buffer overflow in libwebp MFSA 2023-40 bsc1215231. The following non-security bug was fixed: - Fix i586 build by reducing debug info to -g1 bsc1210168...

SUSE-SU-2023:3609-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.2.1 ESR bsc1215245. - CVE-2023-4863: Fixed heap buffer overflow in libwebp MFSA 2023-40 bsc1215231. The following non-security bug was fixed: - Fix i586 build by reducing debug info to -g1 bsc1210168...