3178 matches found
PT-2026-44451
LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in ast sel weave.cpp...
PT-2026-44454
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp...
PT-2026-41326
There is a heap-based buffer over-read in the fmt entry function in tinfo/comp hash.c in the terminfo library in ncurses before 6.1-20191012...
PT-2026-41325
There is a heap-based buffer over-read in the nc find entry function in tinfo/comp hash.c in the terminfo library in ncurses before 6.1-20191012...
PT-2026-39530
SDL Simple DirectMedia Layer through 2.0.12 has a heap-based buffer over-read in Blit 3or4 to 3or4 inversed rgb in video/SDL blit N.c via a crafted .BMP file...
PT-2026-39348
HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM memcpyvv in H5VM.c called from H5D compact readvv in H5Dcompact.c...
PT-2026-39361
HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5F addr decode len in H5Fint.c, resulting in the corruption of the instruction pointer...
PT-2026-38512
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c...
PT-2026-38511
Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap reg.c and adaptmap.c...
PT-2026-38513
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c...
PT-2026-38510
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c...
CVE-2019-20088
GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GetPayload in GPMFmp4reader.c...
CVE-2019-20219
ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor in ngiflib.c...
CVE-2022-27607
Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4HvccAtom class, a different issue than CVE-2018-14531...
PT-2025-48518
An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap-based buffer overflow and heap-based buffer over-read in DTLS if MBEDTLS SSL DTLS CONNECTION ID is enabled and MBEDTLS SSL CID IN LEN MAX 2 MBEDTLS SSL CID OUT LEN MAX...
PT-2025-48516
An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information...
PT-2025-45969
libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put pixel rows function in wrbmp.c, as demonstrated by djpeg...
PT-2025-46012
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML GetCurrentLineNumber or XML GetCurrentColumnNumber then resulted in a heap-based buffer over-read...
