10979 matches found
CVE-2023-40889
CVE-2023-40889 (ZBar) involves a heap-based buffer overflow in the qr_reader_match_centers function of ZBar 0.23.90. A specially crafted QR code can trigger information disclosure and potentially arbitrary code execution when scanned. Exploit vectors in public advisories align with input via inpu...
CVE-2023-40889
A heap-based buffer overflow exists in the qrreadermatchcenters function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be...
CVE-2023-40889
A heap-based buffer overflow exists in the qrreadermatchcenters function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be...
CVE-2023-40745
LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service application crash or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow...
CVE-2020-19190
A flaw was found in the ncurses library. This issue occurs when processing a crafted terminfo database, causing a heap-based buffer overflow, resulting in an application crash. Mitigation Do not compile or decompile untrusted terminfo descriptions...
CVE-2020-19189
A flaw was found in the ncurses library. This issue occurs when processing a crafted terminfo database, causing a heap-based buffer overflow, resulting in an application crash. Mitigation Do not compile or decompile untrusted terminfo descriptions...
Fedora 38 : ImageMagick (2023-27548af422)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-27548af422 advisory. Update ImageMagick to 7.1.1.15 2217558 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
CVE-2020-19726
A heap-based buffer overflow was found in binutils in the bfdgetl32 function, relating to the auxiliary symbol data. This flaw allows an attacker to read or write to system memory or cause a denial of service...
Amazon Linux 2 : libjpeg-turbo (ALAS-2023-2214)
The version of libjpeg-turbo installed on the remote host is prior to 2.0.90-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2214 advisory. The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a...
CVE-2021-46174
Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37...
CVE-2021-32420
dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y...
CVE-2021-32420
dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y...
Heap overflow
dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y...
CVE-2021-32420
dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y...
CVE-2021-46174
Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37...
CVE-2021-32420
dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y...
CVE-2021-32420
CVE-2021-32420 affects dpic 2021.01.01 and is caused by a Heap-based Buffer Overflow in the thestorestring function in dpic.y. The CVE’s NVD entry lists a CVSS v3.1 base score of 7.5 (HIGH) with Network attack vector, Low attack complexity, no privileges or user interaction, and Availability impa...
PT-2023-12166 · Dpic +1 · Dpic +1
Name of the Vulnerable Software and Affected Versions: dpic version 2021.01.01 Description: The issue is a Heap-based Buffer Overflow in the thestorestring function in dpic.y. This occurs due to improper handling of data, leading to a potential overflow. No information is provided about the...