PT-2020-19189

Name of the Vulnerable Software and Affected Versions stb versions prior to 1.23 Description The issue is related to a heap-based buffer over-read in the stbtt buf peek8 function. Recommendations For versions prior to 1.23, update to version 1.23 or later to resolve the issue...

CVE-2020-6612: Out-of-bounds Read

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copycompressedbytes in decoder2007.c...

PT-2020-19180

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.9.3.2564 Description The issue is related to a heap-based buffer over-read in the bit search sentinel function located in bits.c. Recommendations For GNU LibreDWG version 0.9.3.2564, consider updating to a newer version...

PT-2020-19188

Name of the Vulnerable Software and Affected Versions stb versions 1.22 and earlier Description The issue is related to a heap-based buffer over-read in the ttUSHORT function. Recommendations For versions 1.22 and earlier, update to a version that contains a fix for this issue...

CVE-2020-6614: Out-of-bounds Read

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfrread in decode.c...

CVE-2020-6613: Out-of-bounds Read

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bitsearchsentinel in bits.c...

CVE-2020-6618: Out-of-bounds Read

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttfindtable...

CVE-2020-6622: Out-of-bounds Read

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...

CVE-2020-6620: Out-of-bounds Read

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufget8...

CVE-2019-20352

In Netwide Assembler NASM 2.15rc0, a heap-based buffer over-read occurs via a crafted .asm file in settextfree when called from expandonesmacro in asm/preproc.c...

CVE-2019-20352

CVE-2019-20352 affects Netwide Assembler (NASM) 2.15rc0 with a heap-based buffer over-read in set_text_free, triggered when expand_one_smacro processes a crafted .asm file (asm/preproc.c). Exploitation could lead to a crash and, per CVSS3.1, high impact on confidentiality and availability (local,...

CVE-2019-20352: Out-of-bounds Read

In Netwide Assembler NASM 2.15rc0, a heap-based buffer over-read occurs via a crafted .asm file in settextfree when called from expandonesmacro in asm/preproc.c...

Medium: oniguruma

Issue Overview: Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c. CVE-2019-16163 Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in strlowercasematch in regexec.c.CVE-2019-19246 Affected Packages:...

MGASA-2020-0015 Updated libextractor packages fix security vulnerability

Updated libextractor packages fix security vulnerability: GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTORdviextractmethod in plugins/dviextractor.c CVE-2019-15531...

Updated jhead packages fix security vulnerabilities

Updated jhead package fixes security vulnerabilities: jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and processSOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file CVE-2019-19035. A vulnerability...

CVE-2019-20219

ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor in ngiflib.c...

CVE-2019-20219

ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor in ngiflib.c...

PT-2020-10377

Name of the Vulnerable Software and Affected Versions ngiflib version 0.4 Description The issue is a heap-based buffer over-read in the GifIndexToTrueColor function located in ngiflib.c. Recommendations For ngiflib version 0.4, consider applying a patch or fix to address the heap-based buffer...

CVE-2019-20219: Out-of-bounds Read

ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor in ngiflib.c...

EulerOS 2.0 SP8 : binutils (EulerOS-SA-2020-1001)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - loadspecificdebugsection in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based...