CVE-2020-6618

The CVE-2020-6618 entry concerns the stb_truetype.h/STB library: versions through 1.22 contain a heap-based buffer over-read in stbtt__find_table. Multiple sources (NVD entry and various advisories) confirm the underlying issue but do not provide an explicit patched version in these documents. Im...

CVE-2020-6618

Removed by vendor...

CVE-2020-6620

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufget8...

CVE-2020-6621

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT...

CVE-2020-6621

Removed by vendor...

CVE-2020-6613

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bitsearchsentinel in bits.c...

CVE-2020-6612

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copycompressedbytes in decoder2007.c...

CVE-2020-6609

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in readpagesmap in decoder2007.c...

CVE-2020-6613

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bitsearchsentinel in bits.c...

CVE-2020-6614

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfrread in decode.c...

CVE-2020-6612

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copycompressedbytes in decoder2007.c...

Heap overflow

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in readpagesmap in decoder2007.c...

Heap overflow

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copycompressedbytes in decoder2007.c...

CVE-2020-6612

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copycompressedbytes in decoder2007.c...

CVE-2020-6612

CVE-2020-6612 affects GNU LibreDWG, specifically version 0.9.3.2564, where a heap-based buffer over-read occurs in decode_r2007.c in copy_compressed_bytes. Public advisories from openSUSE/OpenSUSE security updates (libredwg 0.10) indicate this is among several fixes addressing CVEs in the 2020-66...

CVE-2020-6613

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bitsearchsentinel in bits.c...

CVE-2020-6613

CVE-2020-6613 affects GNU LibreDWG 0.9.3.2564 and is described as a heap-based over-read in bit_search_sentinel (bits.c). Connected entries show fixes in libredwg upstream to release 0.10 and security advisories (openSUSE/SUSE updates) that patch libredwg to mitigate CVE-2020-6613 (and related CV...

CVE-2020-6614

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfrread in decode.c...

SUSE SLED15 / SLES15 Security Update : virglrenderer (SUSE-SU-2020:0017-1)

This update for virglrenderer fixes the following issues : CVE-2019-18388: Fixed a NULL pointer dereference which could have led to denial of service bsc1159479. CVE-2019-18390: Fixed an out of bound read which could have led to denial of service bsc1159478. CVE-2019-18389: Fixed a heap buffer...

Updated radare2 packages fix security vulnerabilities

Updated radare2 packages fix security vulnerabilities: In radare2 through 3.5.1, there is a heap-based buffer over-read in the regglangparsechar function of egglang.c. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact because of...