Heap overflow

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2020-22675

The CVE-2020-22675 issue affects GPAC 0.8.0 where GetGhostNum in stbl_read.c has a heap-based buffer overflow that can cause a Denial of Service via crafted input. This is documented across multiple feeds (NVD/Numerous OSV/NASL entries) and is not a vendor patch detail in the core CVE entry. Some...

CVE-2021-3835

Buffer overflow in usb device class. Zephyr versions = v2.6.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fm6v-8625-99jf...

Heap-based Buffer Overflow in vim/vim

...

CVE-2021-32959

Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06...

CVE-2021-39552

An issue was discovered in sela through 20200412. file::WavFile::readFromFile in wavfile.c has a heap-based buffer overflow...

CVE-2021-39546

An issue was discovered in sela through 20200412. rice::RiceDecoder::process in ricedecoder.cpp has a heap-based buffer overflow...

DEBIAN-CVE-2021-39536

An issue was discovered in libxsmm through v1.16.1-93. The JIT code has a heap-based buffer overflow...

CVE-2021-39518

An issue was discovered in libjpeg through 2020021. LineBuffer::FetchRegion in linebuffer.cpp has a heap-based buffer overflow...

Sela 缓冲区错误漏洞

Sela is a lossless audio codec. A security vulnerability exists in sela, which stems from a heap-based buffer overflow in file::WavFile::writeToFile in wav file.c. The vulnerability is caused by a heap-based buffer overflow in file::WavFile::writeToFile...

UBUNTU-CVE-2021-3778

vim is vulnerable to Heap-based Buffer Overflow...

ROS-2-538

2.538 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

CVE-2021-21836

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input using the “ctts” FOURCC code can cause an integer overflow due to unchecked arithmetic resulting in a heap-based...

AT&T Labs Xmill 缓冲区错误漏洞

AT&T Labs Xmill is a new tool for efficiently compressing XML data from AT&T Labs, USA. A security vulnerability exists in AT&T Labs Xmill due to a boundary error in the xml parsing ParseAttribs function. A remote attacker could exploit the vulnerability could send a specially crafted XML file,...

Wasm3 缓冲区错误漏洞

wasm3 is the fastest WebAssembly interpreter and the most versatile runtime. A security vulnerability exists in wasm3 that stems from a heap-based buffer overflow...

CVE-2021-36977

matio aka MAT File I/O Library 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MMmemcpy called from H5MMmalloc and H5Cloadentry, related to use of HDF5 1.12.0...

libass 缓冲区错误漏洞

libass is a subtitle renderer based on the ASS/SSA format by an individual developer. A security vulnerability exists in libass that stems from a heap-based buffer overflow because the wrong integer data type is used for subtraction...

MAT File I/O Library 缓冲区错误漏洞

MAT File I/O Library matio is an open source, C language library for reading and writing binary MATLAB MAT files. A security vulnerability exists in MAT File I/O Library that stems from having a heap-based buffer overflow...

SUSE-SU-2021:2322-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2020-13904: Fixed use-after-free via a crafted EXTINF duration in an m3u8 file bsc1172640. - CVE-2020-21041: Fixed buffer overflow vulnerability via apngdoinverseblend in libavcodec/pngenc.c bsc1186406. - CVE-2019-17539: Fixed NULL pointer...

SELinux Buffer Overflow Vulnerability

SELinux is a Linux subsystem from the National Security Agency that uses a secure architecture that allows administrators to better control who has access to the system. A security vulnerability exists in SELinux version 3.2, which stems from a heap-based buffer overflow in the CIL compiler in...