PT-2022-13844

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.6.8 Description The issue is a Heap-based Buffer Overflow that causes the program to read data past the end of the intended buffer. This can allow attackers to read sensitive information from other memory locations ...

CVE-2022-1383: Heap-based Buffer Overflow

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash...

CVE-2022-28966

Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3code.c called indirectly from CompileBranchTable in m3compile.c...

CVE-2022-28966

Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3code.c called indirectly from CompileBranchTable in m3compile.c...

CVE-2022-28966

Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3code.c called indirectly from CompileBranchTable in m3compile.c...

PT-2022-19331

Name of the Vulnerable Software and Affected Versions Wasm3 version 0.5.0 Description The issue is a heap-based buffer overflow in the NewCodePage function in m3 code.c, which is called indirectly from the Compile BranchTable function in m3 compile.c. Recommendations For Wasm3 version 0.5.0,...

PT-2022-37401

Name of the Vulnerable Software and Affected Versions Wasm3 version 0.5.0 Description The issue is a heap-based buffer overflow in the NewCodePage function located in m3 code.c, which is indirectly called from the Compile BranchTable function in m3 compile.c. Recommendations For Wasm3 version...

CVE-2022-28966: Out-of-bounds Write

Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3code.c called indirectly from CompileBranchTable in m3compile.c...

CVE-2021-40426

A heap-based buffer overflow vulnerability exists in the sphere.c startread functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21944

Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer oveflow takes place tryi...

CVE-2021-21946

Two heap-based buffer overflow vulnerabilities exists in the JPEG-JFIF lossless Huffman image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based...

CVE-2021-21943

A heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21948

A heap-based buffer overflow vulnerability exists in the readDatHeadVec functionality of AnyCubic Chitubox AnyCubic Plugin 1.0.0. A specially-crafted GF file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

Heap overflow

A heap-based buffer overflow vulnerability exists in the readDatHeadVec functionality of AnyCubic Chitubox AnyCubic Plugin 1.0.0. A specially-crafted GF file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-40426

A heap-based buffer overflow vulnerability exists in the sphere.c startread functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-40426

A heap-based buffer overflow vulnerability exists in the sphere.c startread functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-40426

CVE-2021-40426 is a heap-buffer-overflow in the sphere.c start_read() path of Sound Exchange SoX (libsox) 14.4.2 and the master commit 42b3557e. A specially crafted input file can trigger the overflow, with potential outcomes including crash or more severe impact as described in related advisorie...

CVE-2021-21948

A heap-based buffer overflow vulnerability exists in the readDatHeadVec functionality of AnyCubic Chitubox AnyCubic Plugin 1.0.0. A specially-crafted GF file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21946

CVE-2021-21946 affects Accusoft ImageGear 19.10’s JPEG-JFIF lossless Huffman image parser. The vulnerability arises in process_jpeg_lossless (and buffer allocation in allocate_buffer_for_jpeg_decoding) where per-component buffers are sized via a formula (standardized_width = (X_image * subsamplin...

CVE-2021-21946

Two heap-based buffer overflow vulnerabilities exists in the JPEG-JFIF lossless Huffman image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based...