Heap overflow

An issue was discovered in libxsmm through v1.16.1-93. The JIT code has a heap-based buffer overflow...

CVE-2021-39551

An issue was discovered in sela through 20200412. file::SelaFile::readFromFile in selafile.c has a heap-based buffer overflow...

CVE-2021-39525

An issue was discovered in libredwg through v0.10.1.3751. bitreadfixed in bits.c has a heap-based buffer overflow...

CVE-2021-39546

CVE-2021-39546 affects SELA (lossless audio codec). The issue is a heap-based buffer overflow in rice::RiceDecoder::process() implemented in rice_decoder.cpp, impacting SELA versions up to 20200412. The vulnerability detail provided across sources confirms the root cause is a buffer overflow in t...

CVE-2021-39546

An issue was discovered in sela through 20200412. rice::RiceDecoder::process in ricedecoder.cpp has a heap-based buffer overflow...

CVE-2021-39544

The CVE-2021-39544 issue affects SELA up to 20200412, where file::WavFile::writeToFile() in wav_file.c has a heap-based buffer overflow. Affected component is the WavFile writable path in the SELA codec; exact root cause is a heap overflow in that function. Impact per sources indicates potential ...

CVE-2021-39552

CVE-2021-39552 affects sela up to 20200412, with a heap-based buffer overflow in file::WavFile::readFromFile() (wav_file.c). Impact described as partial confidentiality/integrity/availability (per CVSS 3.1: HIGH). Connected sources also reference heap-based overflow variants, but the provided doc...

CVE-2021-39550

An issue was discovered in sela through 20200412. file::SelaFile::readFromFile in selafile.cpp has a heap-based buffer overflow...

CVE-2021-39550

CVE-2021-39550 affects the SELA lossless audio codec. The vulnerability is a heap-based buffer overflow in file::SelaFile::readFromFile() within sela_file.cpp, impacting SELA builds up to 20200412 and earlier. Documents specify the vulnerable component and function, but do not provide detailed ex...

CVE-2021-39527

An issue was discovered in libredwg through v0.10.1.3751. appinfoprivate in decode.c has a heap-based buffer overflow...

CVE-2021-39530

An issue was discovered in libredwg through v0.10.1.3751. bitwcs2nlen in bits.c has a heap-based buffer overflow...

CVE-2021-39518

An issue was discovered in libjpeg through 2020021. LineBuffer::FetchRegion in linebuffer.cpp has a heap-based buffer overflow...

CVE-2021-39522

CVE-2021-39522 affects the LibreDWG library (libredwg) up to version 0.10.1.3751. The root cause is a heap-based buffer overflow in bit_wcs2len() located in bits.c. This vulnerability can potentially corrupt heap memory when processing certain inputs, as described in multiple sources (e.g., CNVD-...

CVE-2021-39537

An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow...

CVE-2021-39537

CVE-2021-39537 affects ncurses: _nc_captoinfo in captoinfo.c has a heap-based buffer overflow when processing terminfo data, observed in ncurses up to v6.2-1. Connected advisories confirm this is a real issue and provide mitigations/patch paths: Debian DLA-3682-1 and related Debian notes, Cloud F...

CVE-2020-21547

Libsixel 1.8.2 contains a heap-based buffer overflow in the ditherfuncfs function in tosixel.c...

CVE-2020-21547

CVE-2020-21547 affects Libsixel 1.8.2, with a heap-based buffer overflow in the dither_func_fs function (tosixel.c). Multiple connected sources corroborate the flaw and link it to Libsixel 1.8.2, describing the vulnerability as a heap overflow in that code path. APTs suggest a remediation path: v...

CVE-2020-21547

Libsixel 1.8.2 contains a heap-based buffer overflow in the ditherfuncfs function in tosixel.c...

CVE-2021-38404 Delta Electronics DOPSoft 2 Heap-based Buffer Overflow

Delta Electronic DOPSoft 2 Version 2.00.07 and prior lacks proper validation of user-supplied data when parsing specific project files. This could result in a heap-based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process...

Amazon Linux 2 : gcc10-binutils (ALAS-2021-1702)

The version of gcc10-binutils installed on the remote host is prior to 2.35-21. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1702 advisory. 2024-01-19: CVE-2021-20284 was added to this advisory. An issue was discovered in the Binary File Descriptor BFD...