CVE-2022-34299

CVE-2022-34299 affects libdwarf 0.4.0 with a heap-based buffer over-read in function dwarf_global_formref_b. The vulnerability can lead to a crash/denial of service as described by Red Hat and related sources. Several connected records indicate fixes for newer libdwarf versions (e.g., 0.4.2 in OS...

CVE-2022-34299

There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarfglobalformrefb...

CVE-2022-34299

There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarfglobalformrefb...

EulerOS 2.0 SP8 : vim (EulerOS-SA-2022-1953)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read in vim/vim prior to 8.2. CVE-2022-0319 - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. CVE-2022-0361 -...

CVE-2022-34300

In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1953)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-34300

In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData...

CVE-2022-34300

CVE-2022-34300 affects tinyexr 1.0.1, where a heap-based buffer over-read in tinyexr::DecodePixelData is reported. The vulnerability can lead to information disclosure and adverse impacts on availability/integrity as per CVSS vectors from NVD (CVE-2022-34300; CVSS v3.1: High, LAN, no privileges, ...

CVE-2022-2125

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Mitigation Scripts with -s scriptin are not recommended to run...

OPENSUSE-SU-2022:10017-1 Security update for chafa

This update for chafa fixes the following issues: - CVE-2022-2061: Fix heap based buffer overflow in lzwdecode boo1200510...

Heap-based Buffer Overflow in function utf_ptr2char

Description Heap-based Buffer Overflow in function utfptr2char at mbyte.c:1794 vim version git log commit e366ed4f2c6fa8cb663f1b9599b39d57ddbd8a2a HEAD - master, tag: v8.2.5136, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /mnt/share/max/fuzz/poc/vim/pochbo3s.dat -c...

Security update for chafa (important)

openSUSE Security Update: Security update for chafa Announcement ID: openSUSE-SU-2022:10017-1 Rating: important References: 1200510 Cross-References: CVE-2022-2061 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes one vulnerability is now available. Description: This update fo...

Debian DLA-3053-1 : vim - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3053 advisory. Multiple security vulnerabilities have been discovered in vim, an enhanced vi editor. Buffer overflows, out-of-bounds reads and use-after-free may lead to a...

Heap overflow

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor. A security vulnerability exists in versions prior to Vim 8.2 that stems from the presence of a heap-based buffer overflow...

CVE-2022-2125 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2021-46822

The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the getwordrgbrow function in rdppm.c...

Heap overflow

The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the getwordrgbrow function in rdppm.c...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1918)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 Security Update : vim (SUSE-SU-2022:2102-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2102-1 advisory. - CVE-2017-17087: Fixed information leak via .swp files bsc1070955. - CVE-2021-3875: Fixed heap-based buffer...