CVE-2020-23931

An issue was discovered in gpac before 1.0.1. The abstboxread function in boxcodeadobe.c has a heap-based buffer over-read...

CVE-2020-23928

An issue was discovered in gpac before 1.0.1. The abstboxread function in boxcodeadobe.c has a heap-based buffer over-read...

Heap overflow

An issue was discovered in cpp-peglib through v0.1.12. peg::resolveescapesequence in peglib.h has a heap-based buffer over-read...

CVE-2020-23931

An issue was discovered in gpac before 1.0.1. The abstboxread function in boxcodeadobe.c has a heap-based buffer over-read...

Heap overflow

An issue was discovered in gpac before 1.0.1. The abstboxread function in boxcodeadobe.c has a heap-based buffer over-read...

CVE-2020-23915

An issue was discovered in cpp-peglib through v0.1.12. peg::resolveescapesequence in peglib.h has a heap-based buffer over-read...

CVE-2020-23928

An issue was discovered in gpac before 1.0.1. The abstboxread function in boxcodeadobe.c has a heap-based buffer over-read...

CVE-2020-23931

An issue was discovered in gpac before 1.0.1. The abstboxread function in boxcodeadobe.c has a heap-based buffer over-read...

CVE-2020-23922

An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read...

CVE-2020-23921

CVE-2020-23921 concerns the fast_ber library. The vulnerability is a heap-based buffer over-read in the function yy::yylex() located in asn_compiler.hpp, affecting fast_ber versions prior to v0.5. The connected sources confirm the flaw but do not provide exploit details or in‑the‑wild activity. I...

CVE-2020-23921

An issue was discovered in fastber through v0.4. yy::yylex in asncompiler.hpp has a heap-based buffer over-read...

CVE-2020-23915

An issue was discovered in cpp-peglib through v0.1.12. peg::resolveescapesequence in peglib.h has a heap-based buffer over-read...

CVE-2020-23922

An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read...

CVE-2020-23915

CVE-2020-23915 affects the cpp-peglib library (header-only PEG parser) and is caused by a heap-based buffer over-read in peg::resolve_escape_sequence() implemented in peglib.h, impacting v0.1.12 and earlier. The vulnerability is documented across multiple connected sources (NVD and OSV entries) w...

CVE-2020-23928

CVE-2020-23928 details (GPAC) : A heap-based buffer over-read exists in the abst_box_read function of box_code_adobe.c in gpac versions prior to 1.0.1. The issue can affect memory management in parsing, with the documented impacts including partial confidentiality and partial availability per CVS...

CVE-2020-35979

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is heap-based buffer overflow in the function gprtpbuilderdoavc in ietf/rtppckmpeg4.c...

Heap overflow

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is heap-based buffer overflow in the function gprtpbuilderdoavc in ietf/rtppckmpeg4.c...

CVE-2020-35979

GPAC 0.8.0 and 1.0.1 contain a heap-based buffer overflow in gp_rtp_builder_do_avc() (ietf/rtp_pck_mpeg4.c). Exploitation/impact details are not elaborated beyond this CVE, but related advisories recommend upgrading to GPAC >= 2.2.0 (e.g., Gentoo GLSA 202408-21). Monitor for updates and apply ...

Parallels Desktop IDE Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the IDE...

Parallels Desktop OTG Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Open Too...