OSV-2023-77 Heap-buffer-overflow in H5C__load_cache_image

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56075 Crash type: Heap-buffer-overflow READ 4 Crash state: H5Cloadcacheimage H5Cprotect H5ACprotect...

OSV-2023-75 Heap-buffer-overflow in isvcd_interlyr_motion_mode_pred_dyadic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56050 Crash type: Heap-buffer-overflow READ 1 Crash state: isvcdinterlyrmotionmodepreddyadic isvcdmvpredreftfrnby2epmb isvcdparseinterslicedatacabacenhlyr...

OSV-2023-72 Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56057 Crash type: Heap-buffer-overflow WRITE 4 Crash state: perfetto::traceprocessor::TrackEventParser::ParseTrackDescriptor perfetto::traceprocessor::TrackEventModule::ParseTracePacketData...

Denial Of Service (DoS)

clamav is vulnerable to denial of service DoS. A missing buffer size check results in a heap buffer overflow write, an attacker could submit a crafted HFS+ partition file allowing them to execute arbitrary code resulting in a system crash...

PT-2023-35987 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the function names H5C load cache image, H5C protect, and H5AC protect. Recommendations: At...

PT-2023-35978 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves several functions, including isvcd interlyr motion mode pred dyadic, isvcd mv...

PT-2023-35992 · Git +1 · Libucl

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details include a crash state involving ucl object dtor unref single, ucl object dto...

PT-2023-35998 · Git +1 · Libgit2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap buffer overflow read. Technical details include a crash type of Heap-buffer-overflow READ and a crash state involving...

PT-2023-35963 · Perfetto · Perfetto

Name of the Vulnerable Software and Affected Versions: perfetto affected versions not specified Description: The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the perfetto::trace processor::TrackEventParser::ParseTrackDescriptor function, the...

OSV-2023-68 Heap-buffer-overflow in isvcd_residual_samp_mb_dyadic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56023 Crash type: Heap-buffer-overflow READ 2 Crash state: isvcdresidualsampmbdyadic isvcdprocessresidualresamplemb isvcdprocessintermbrsdpredtargetlyr...

OSV-2023-66 Heap-buffer-overflow in mosquitto__strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56008 Crash type: Heap-buffer-overflow READ Crash state: mosquittostrdup configreadfilecore configreadfile...

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap buffer overflow in the gfisomboxsize function of boxfuncs.c, allowing an attacker to cause an application crash...

Siemens Solid Edge 缓冲区错误漏洞

Siemens Solid Edge is a 3D CAD software from Siemens, a German company. Siemens Solid Edge is vulnerable to heap buffer overflow, which can be exploited by attackers to execute code in the context of the current process...

PT-2023-35945 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 2 crash has been reported. The crash involves the following functions: isvcd residual samp mb dyadic, isvcd process residual...

Adobe Animate Heap Buffer Overflow Vulnerability (CNVD-2023-13732)

Adobe Animate is a set of Flash animation software from Adobe. Adobe Animate is vulnerable to a heap buffer overflow vulnerability that could be exploited to execute arbitrary code in the context of the current user...

Siemens Solid Edge 缓冲区错误漏洞

Siemens Solid Edge is a 3D CAD software from Siemens, a German company. Siemens Solid Edge is vulnerable to heap buffer overflow, which can be exploited by attackers to execute code in the context of the current process...

ClamAV HFS+ Partition Scanning Buffer Overflow Vulnerability Affecting Cisco Products: February 2023

On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to execute arbitrary code...

OSV-2023-61 Heap-buffer-overflow in xmlParseTryOrFinish

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55980 Crash type: Heap-buffer-overflow READ 1 Crash state: xmlParseTryOrFinish xmlParseChunk xml.c...

heap-buffer-overflow in function adts_dmx_process filters/reframe_adts.c

Version MP4Box - GPAC version 2.3-DEV-rev44-gbe9f8d395-master c 2000-2023 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io Please cite our work in your research: GPAC Filters: https://doi.org/10.1145/3339825.3394929 GPAC: https://doi.org/10.1145/1291233.1291452 GPAC Configuration:...

SUSE CVE-2008-2363

The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted .nzb file that triggers a heap-based buffer overflow...