CVE-2021-39550

CVE-2021-39550 affects the SELA lossless audio codec. The vulnerability is a heap-based buffer overflow in file::SelaFile::readFromFile() within sela_file.cpp, impacting SELA builds up to 20200412 and earlier. Documents specify the vulnerable component and function, but do not provide detailed ex...

CVE-2021-39527

An issue was discovered in libredwg through v0.10.1.3751. appinfoprivate in decode.c has a heap-based buffer overflow...

CVE-2021-39530

An issue was discovered in libredwg through v0.10.1.3751. bitwcs2nlen in bits.c has a heap-based buffer overflow...

CVE-2021-39518

An issue was discovered in libjpeg through 2020021. LineBuffer::FetchRegion in linebuffer.cpp has a heap-based buffer overflow...

CVE-2021-39522

CVE-2021-39522 affects the LibreDWG library (libredwg) up to version 0.10.1.3751. The root cause is a heap-based buffer overflow in bit_wcs2len() located in bits.c. This vulnerability can potentially corrupt heap memory when processing certain inputs, as described in multiple sources (e.g., CNVD-...

CVE-2021-39537

CVE-2021-39537 affects ncurses: _nc_captoinfo in captoinfo.c has a heap-based buffer overflow when processing terminfo data, observed in ncurses up to v6.2-1. Connected advisories confirm this is a real issue and provide mitigations/patch paths: Debian DLA-3682-1 and related Debian notes, Cloud F...

CVE-2021-39537

An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow...

CVE-2020-21547

Libsixel 1.8.2 contains a heap-based buffer overflow in the ditherfuncfs function in tosixel.c...

CVE-2020-21547

CVE-2020-21547 affects Libsixel 1.8.2, with a heap-based buffer overflow in the dither_func_fs function (tosixel.c). Multiple connected sources corroborate the flaw and link it to Libsixel 1.8.2, describing the vulnerability as a heap overflow in that code path. APTs suggest a remediation path: v...

CVE-2020-21547

Libsixel 1.8.2 contains a heap-based buffer overflow in the ditherfuncfs function in tosixel.c...

CVE-2021-38404 Delta Electronics DOPSoft 2 Heap-based Buffer Overflow

Delta Electronic DOPSoft 2 Version 2.00.07 and prior lacks proper validation of user-supplied data when parsing specific project files. This could result in a heap-based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process...

Amazon Linux 2 : gcc10-binutils (ALAS-2021-1702)

The version of gcc10-binutils installed on the remote host is prior to 2.35-21. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1702 advisory. 2024-01-19: CVE-2021-20284 was added to this advisory. An issue was discovered in the Binary File Descriptor BFD...

CVE-2021-3778

A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-3778

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3778

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3778 Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3778

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3778

vim is vulnerable to Heap-based Buffer Overflow...

Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2021-2403)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-3778

CVE-2021-3778 is a heap-based buffer overflow in Vim. Public feeds attribute the issue to heap-based corruption caused by invalid UTF-8 handling in Vim’s code paths (examples include utf_ptr2char() in mbyte.c per ALAS2-2021-1728, and references in Debian’s security tracker). The connected documen...