libsixel资源管理错误漏洞

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A resource management error vulnerability exists in libsixel version 1.8.6, which stems from the presence of heap-based post-release reuse in libsixel/src/dither.c:388. An...

CVE-2022-28805

singlevar in lparser.c in Lua from including 5.4.0 up to excluding 5.4.4 lacks a certain luaKexp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code...

CVE-2022-28805

singlevar in lparser.c in Lua from including 5.4.0 up to excluding 5.4.4 lacks a certain luaKexp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code...

CVE-2021-43453

A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parserparseforstatementstart in the js-parser-statm.c file. This issue is similar to CVE-2020-29657...

Heap overflow

A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parserparseforstatementstart in the js-parser-statm.c file. This issue is similar to CVE-2020-29657...

CVE-2021-43453

A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parserparseforstatementstart in the js-parser-statm.c file. This issue is similar to CVE-2020-29657...

CVE-2021-43453

CVE-2021-43453 (JerryScript) is a heap-based buffer overflow affecting JerryScript 2.4.0 and earlier, caused by an out-of-bounds read in parser_parse_for_statement_start (js-parser-statm.c). The vulnerability is explicitly comparable to CVE-2020-29657. Documents consistently describe the flaw in ...

CVE-2022-25596

The CVE-2022-25596 entry concerns the ASUS RT-AC56U router. A heap-based buffer overflow arises from insufficient validation of the decryption parameter length, enabling an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations, and disrupt service. The affected devi...

CVE-2022-25596 ASUS RT-AC86U - Heap-based buffer overflow

ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and disrupt service...

Heap-based Buffer Overflow

vim is vulnerable to heap-based buffer overflow. A remote attacker is able to cause a system crash...

CVE-2022-24795

A flaw was found in the YAJL library in the way it reallocates a memory buffer to store more data. A very large input causes the value used to calculate the buffer size to overflow, resulting in a heap-based buffer overflow. Mitigation Avoid passing large inputs to the YAJL library...

Heap-based Buffer Overflow

libde265.so is vulnerable to heap-based buffer overflow. The lack of sanitization causes a heap-based buffer overflow in readspsNAL function in decctx.cc, which results in an application crash...

PT-2022-11840 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: JerryScript versions prior to 2.4.0 Description: A Heap-based Buffer Overflow issue exists via an out-of-bounds read in the parser parse for statement start function in the js-parser-statm.c file. Recommendations: For versions prior to 2.4.0,...

Security update for SDL2 (important)

openSUSE Security Update: Security update for SDL2 Announcement ID: openSUSE-SU-2022:0104-1 Rating: important References: 1181201 1181202 1197525 Cross-References: CVE-2020-14409 CVE-2020-14410 CVE-2022-27227 CVSS scores: CVE-2020-14409 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H...

PT-2022-13752 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: libde265 versions prior to 1.0.11 Description: A Heap-based Buffer Overflow issue has been identified in the libde265 library. The issue is related to a buffer overflow, which can be exploited. The fix for this issue is established in a...

Amazon Linux AMI : vim (ALAS-2022-1579)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1579 advisory. A flaw was found in vim. The vulnerability occurs due to a crash when recording and using Select mode and leads to an out-of-bounds read. This flaw allows an attacker to input a specially crafted...

CVE-2022-1253 Heap-based Buffer Overflow in strukturag/libde265

Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release...

CLSA-2022-1649170979 Fix of CVE: CVE-2022-0943

CVE-2022-0943: fix heap-based buffer overflow...

Fix of CVE: CVE-2022-0943

CVE-2022-0943: fix heap-based buffer overflow...

Autodesk Navisworks Manage PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...