Heap Buffer Overflow

libgpac.so is vulnerable to heap-based buffer overflow. The vulnerability exists in gprtpbuilderdompeg12video function of rtppckmpeg12.c which allows an attacker to send crafted file in the MP4Box command causing an application crash...

Ubuntu 18.04 LTS / 20.04 LTS : Ghostscript vulnerabilities (USN-5224-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5224-1 advisory. It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a...

Debian DLA-2877-1 : gdal - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2877 advisory. - GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogrexpat.cpp when the 10MB threshold is exceeded. CVE-2019-17545 - GDAL 3.3.0 through...

Fix of 14 CVEs

CVE-2018-9138: Fix stack exhaustion - CVE-2018-12641: Fix stack exhaustion - CVE-2018-12697: Fix NULL pointer dereference - CVE-2018-12698: Fix memory consumption - CVE-2018-12699: Fix heap-based buffer overflow - CVE-2018-12700: Fix infinite recursion - CVE-2018-17794: Fix NULL pointer...

Updated ghostscript packages fix security vulnerability

Use-after-free in sampleddatasample called from sampleddatacontinue and interp. CVE-2021-45944 Heap-based buffer overflow in sampleddatafinish called from sampleddatacontinue and interp. CVE-2021-45949...

Vulnerability Spotlight: Buffer overflow vulnerability in AnyCubic Chitubox plugin

Carl Hurd of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered an exploitable heap-based buffer overflow vulnerability in the Chitubox AnyCubic plugin. Chitubox is 3-D printing software for users to download and process models and send them... This is...

Dnsmasq <= 2.86 Multiple Vulnerabilities

Dnsmasq is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-36412

A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gprtpbuilderdompeg12video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command,...

CVE-2021-36412

A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gprtpbuilderdompeg12video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command,...

CVE-2022-0158

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2022-0158

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2022-0158 Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2022-0158

CVE-2022-0158 affects Vim and is described in connected advisories as a heap-based issue in Vim’s memory handling, with a specific reference to a 1‑byte heap-out-of-bounds read in compile_get_env(). Public advisories also point to updated Vim packages (e.g., Vim 9.0.1160+ in ALAS advisories) as t...

CVE-2022-0158

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2022-0158

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2022-0158 Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow...

PT-2022-1723 · Vim +5 · Vim +5

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is caused by a heap-based buffer overflow in the compile get env function of the vim text editor. This can allow an attacker to execute arbitrary code. The estimated number of...

CVE-2021-36412

Removed by vendor...

CVE-2021-36412

A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gprtpbuilderdompeg12video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command,...

CVE-2021-40026

CVE-2021-40026 is described in connected sources as a heap-based buffer overflow in the Huawei HarmonyOS AOD module (affecting smartphones). The root cause cited is a heap overflow in the AOD component, with potential impact to service integrity. Public details in the documents do not specify aff...