CVE-2020-23931

An issue was discovered in gpac before 1.0.1. The abstboxread function in boxcodeadobe.c has a heap-based buffer over-read...

Heap overflow

An issue was discovered in gpac before 1.0.1. The abstboxread function in boxcodeadobe.c has a heap-based buffer over-read...

CVE-2020-23915

An issue was discovered in cpp-peglib through v0.1.12. peg::resolveescapesequence in peglib.h has a heap-based buffer over-read...

CVE-2020-23928

An issue was discovered in gpac before 1.0.1. The abstboxread function in boxcodeadobe.c has a heap-based buffer over-read...

CVE-2020-23931

An issue was discovered in gpac before 1.0.1. The abstboxread function in boxcodeadobe.c has a heap-based buffer over-read...

CVE-2020-23922

An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read...

CVE-2020-23921

CVE-2020-23921 concerns the fast_ber library. The vulnerability is a heap-based buffer over-read in the function yy::yylex() located in asn_compiler.hpp, affecting fast_ber versions prior to v0.5. The connected sources confirm the flaw but do not provide exploit details or in‑the‑wild activity. I...

CVE-2020-23921

An issue was discovered in fastber through v0.4. yy::yylex in asncompiler.hpp has a heap-based buffer over-read...

CVE-2020-23915

An issue was discovered in cpp-peglib through v0.1.12. peg::resolveescapesequence in peglib.h has a heap-based buffer over-read...

CVE-2020-23922

An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read...

CVE-2020-23915

CVE-2020-23915 affects the cpp-peglib library (header-only PEG parser) and is caused by a heap-based buffer over-read in peg::resolve_escape_sequence() implemented in peglib.h, impacting v0.1.12 and earlier. The vulnerability is documented across multiple connected sources (NVD and OSV entries) w...

CVE-2020-23928

CVE-2020-23928 details (GPAC) : A heap-based buffer over-read exists in the abst_box_read function of box_code_adobe.c in gpac versions prior to 1.0.1. The issue can affect memory management in parsing, with the documented impacts including partial confidentiality and partial availability per CVS...

CVE-2020-35979

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is heap-based buffer overflow in the function gprtpbuilderdoavc in ietf/rtppckmpeg4.c...

Heap overflow

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is heap-based buffer overflow in the function gprtpbuilderdoavc in ietf/rtppckmpeg4.c...

CVE-2020-35979

GPAC 0.8.0 and 1.0.1 contain a heap-based buffer overflow in gp_rtp_builder_do_avc() (ietf/rtp_pck_mpeg4.c). Exploitation/impact details are not elaborated beyond this CVE, but related advisories recommend upgrading to GPAC >= 2.2.0 (e.g., Gentoo GLSA 202408-21). Monitor for updates and apply ...

Parallels Desktop IDE Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the IDE...

CentOS: Security Advisory for qemu-guest-agent (CESA-2015:2694)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Parallels Desktop IDE Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the IDE...

Parallels Desktop OTG Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Open Too...

Prusa Research PrusaSlicer Admesh stl_fix_normal_directions() out-of-bounds write vulnerability

Summary An out-of-bounds write vulnerability exists in the Admesh stlfixnormaldirections functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted AMF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...