Lucene search
+L

14869 matches found

Github Security Blog
Github Security Blog
added 2021/10/12 10:23 p.m.38 views

Out-of-bounds Write in OpenCV.

In OpenCV 3.3.1 corresponding with OpenCV-Python 3.3.1.11, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmtjpeg2000.cpp when parsing a crafted image file...

5.5CVSS3.1AI score0.01507EPSS
SaveExploits1References8Affected Software2
OSV
OSV
added 2021/10/12 9:15 p.m.20 views

CVE-2020-22675

An issue was discovered in gpac 0.8.0. The GetGhostNum function in stblread.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

5.5CVSS7.1AI score
SaveExploits0References1
NVD
NVD
added 2021/10/12 9:15 p.m.29 views

CVE-2020-22675

An issue was discovered in gpac 0.8.0. The GetGhostNum function in stblread.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

5.5CVSS0.00766EPSS
SaveExploits1References1
OSV
OSV
added 2021/10/12 9:15 p.m.22 views

CVE-2020-22677

An issue was discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

5.5CVSS7.1AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2021/10/12 9:15 p.m.30 views

CVE-2020-22677

An issue was discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

5.5CVSS7AI score0.00766EPSS
SaveExploits1References3
CVE
CVE
added 2021/10/12 8:37 p.m.56 views

CVE-2020-22677

GPAC 0.8.0 is affected by CVE-2020-22677 due to a heap-based buffer overflow in dump_data_hex() within box_dump.c, which can cause a denial of service via crafted input. This vulnerability is confirmed across multiple feeds (NVD/CNVD/OSV/Gentoo GLSA), and remediation is to upgrade to a newer GPAC...

5.5CVSS5.5AI score0.00766EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/10/12 8:37 p.m.29 views

CVE-2020-22677

An issue was discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

5.6AI score0.00766EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2021/10/12 8:37 p.m.43 views

CVE-2020-22677

An issue was discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

5.5CVSS5.8AI score0.00766EPSS
SaveExploits1
CVE
CVE
added 2021/10/12 8:37 p.m.65 views

CVE-2020-22678

GPAC CVE-2020-22678 affects gpac 0.8.0. The vulnerability is a heap-based buffer overflow in the gf_media_nalu_remove_emulation_bytes function (av_parsers.c) that can trigger a denial of service via crafted input. Connected sources corroborate the same issue across multiple advisories; no explici...

5.5CVSS5.5AI score0.00766EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/10/12 8:37 p.m.34 views

CVE-2020-22678

An issue was discovered in gpac 0.8.0. The gfmedianaluremoveemulationbytes function in avparsers.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

5.6AI score0.00766EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2021/10/12 8:37 p.m.47 views

CVE-2020-22678

An issue was discovered in gpac 0.8.0. The gfmedianaluremoveemulationbytes function in avparsers.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

5.5CVSS5.8AI score0.00766EPSS
SaveExploits1
Prion
Prion
added 2021/10/12 2:15 p.m.22 views

Heap overflow

A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted network packet can lead to a heap buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

7.5CVSS9.5AI score0.01335EPSS
SaveExploits1References1Affected Software1
Kaspersky
Kaspersky
added 2021/10/12 12:0 a.m.62 views

KLA12317 Multiple vulnerabilities in Foxit Reader

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. Code execution vulnerability can be exploited via special crafte...

7.8CVSS9.1AI score0.0187EPSS
SaveExploits6References3
OpenVAS
OpenVAS
added 2021/10/12 12:0 a.m.21 views

openSUSE: Security Advisory for mupdf (openSUSE-SU-2021:1341-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS6.4AI score0.01048EPSS
SaveExploits1References2
CVE
CVE
added 2021/10/06 5:8 p.m.53 views

CVE-2021-25475

Summary of CVE-2021-25475 : The issue is a heap-based buffer overflow in the DSP kernel driver, before Samsung SMR Oct-2021 Release 1. This flaw can lead to arbitrary memory writes and code execution within the kernel context on affected Samsung devices. Affected component: DSP kernel driver. Roo...

7.2CVSS6.9AI score0.00124EPSS
SaveExploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:0 a.m.22 views

Autodesk Design Review DWF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS6AI score0.02208EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/10/06 12:0 a.m.16 views

Python < 2.7.14, 3.4.x < 3.4.8, 3.5.x < 3.5.5 PyString_DecodeEscape integer overflow (bpo-30657) - Windows

CPython aka Python is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

9.8CVSS9.6AI score0.08228EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:0 a.m.27 views

Autodesk Design Review PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.02208EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:0 a.m.21 views

Autodesk Design Review PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.01708EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:0 a.m.18 views

Autodesk Design Review PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.01708EPSS
SaveExploits0References1
Rows per page
Query Builder