CVE-2020-10064

Improper Input Frame Validation in ieee802154 Processing. Zephyr versions = v1.14.2, = v2.2.0 contain Stack-based Buffer Overflow CWE-121, Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3gvq-h42f-v3c7...

CVE-2021-30186

CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow...

CVE-2020-13600 Malformed SPI in response for eswifi can corrupt kernel memory

Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions = 1.14.2, = 2.3.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr...

CVE-2020-10064 Improper Input Frame Validation in ieee802154 Processing

Improper Input Frame Validation in ieee802154 Processing. Zephyr versions = v1.14.2, = v2.2.0 contain Stack-based Buffer Overflow CWE-121, Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3gvq-h42f-v3c7...

CVE-2018-25011

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16...

CVE-2018-25012

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24...

CVE-2018-25009

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16...

CVE-2018-25013

CVE-2018-25013 is a heap-based buffer overflow in libwebp’s ShiftBytes() found in versions before 1.0.1. The issue affects libwebp (WebP codec library) and can lead to memory corruption in image processing. Public references in multiple advisories confirm the vulnerability and recommend upgrading...

CVE-2018-25012

CVE-2018-25012 : A heap-based buffer overflow is present in libwebp’s GetLE24() in versions prior to 1.0.1. Affected component: libwebp library. Remediation: upgrade to libwebp 1.0.1 or newer (various advisories note this patch). Note: connected documents corroborate the issue across multiple ven...

CVE-2018-25010

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter...

CVE-2018-25010

CVE-2018-25010 affects libwebp; a heap-based buffer overflow occurs in ApplyFilter() in versions before 1.0.1. Public documents consistently describe an out-of-bounds condition in libwebp that can crash the library and potentially enable arbitrary code execution. Affected advisories and vendor bu...

CVE-2018-25009

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16...

CVE-2020-36328

CVE-2020-36328 concerns a heap-based buffer overflow in libwebp where WebPDecodeRGBInto may overflow due to an invalid buffer-size check, impacting data confidentiality, integrity, and availability. It affects versions before 1.0.1; multiple connected advisories confirm the same root cause and ve...

Oracle Linux 6 : perl (ELSA-2021-9238)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9238 advisory. - Backport patch for CVE-2020-10543 Orabug: 32855589 - Backport patch for CVE-2020-10878 Orabug: 32855589 Tenable has extracted the preceding descripti...

CVE-2021-31439

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager. Authentication is not required to exploit this vulnerablity. The specific flaw exists within the processing of DSI structures in Netatalk. The issue results fr...

Vulnerability Spotlight: Heap-based buffer overflow in Google Chrome could lead to code execution

Marcin “Icewall” Noga of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered an exploitable heap-based buffer overflow vulnerability in Google Chrome. Google Chrome is a cross-platform web browser — and Chromium is the open-source... This is only the...

SUSE SLED15 / SLES15 Security Update : libxml2 (SUSE-SU-2021:1654-1)

This update for libxml2 fixes the following issues : CVE-2021-3537: NULL pointer dereference in valid.c:xmlValidBuildAContentModel bsc1185698 CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess bsc1185408. CVE-2021-3517: Fixed a heap-based buffer overflow in...

SUSE SLES12 Security Update : libxml2 (SUSE-SU-2021:1658-1)

This update for libxml2 fixes the following issues : Security issues fixed : - CVE-2021-3537: NULL pointer dereference in valid.c:xmlValidBuildAContentModel bsc1185698 CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess bsc1185408. CVE-2021-3517: Fixed a heap-based buffer...

RHEL 8 : perl (RHSA-2021:1678)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1678 advisory. Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: per...

CentOS 8 : perl (CESA-2021:1678)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1678 advisory. - perl: heap-based buffer overflow in regular expression compiler leads to DoS CVE-2020-10543 - perl: corruption of intermediate language state of...