CVE-2021-45910

An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow within the main function. It allows an attacker to write data outside of the allocated buffer. The attacker has control over a part of the address that data is written to, control over the written data, and to some...

Heap overflow

An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in the DecodeLZW function. It allows an attacker to write a large amount of arbitrary data outside the boundaries of a buffer...

CVE-2021-45911

An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow in the main function. It allows an attacker to write 2 bytes outside the boundaries of the buffer...

CVE-2021-45909

gif2apng 1.9 contains a heap-based buffer overflow in DecodeLZW (CVE-2021-45909). An attacker could write arbitrary data beyond buffer boundaries, enabling a potential denial-of-service. Related issues CVE-2021-45910 and CVE-2021-45911 exist in the same tool. Remediation is available: Debian/Ubun...

CVE-2021-45910

gif2apng 1.9 contains a heap-based buffer overflow in the main function (and related DecodeLZW paths) that lets an attacker write data outside the allocated buffer. The attacker may control part of the write address, the data, and, to some extent, the amount of data written. Public reports in Deb...

CVE-2021-45910

An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow within the main function. It allows an attacker to write data outside of the allocated buffer. The attacker has control over a part of the address that data is written to, control over the written data, and to some...

CVE-2021-45910

Removed by vendor...

CVE-2021-45911

The CVE-2021-45911 family affects gif2apng 1.9 with heap-based buffer overflows. CVE-2021-45909 (DecodeLZW), CVE-2021-45910 (main function), and CVE-2021-45911 (delays in main) enable out-of-bounds writes; Debian reports fixed in 1.9+srconly-2+deb9u2, Ubuntu USN-5969-1 references these issues as ...

Fix of 36 CVEs

CVE-2018-6323: Fix unsigned integer overflow - CVE-2018-19931: Fix heap-based buffer overflow in bfdelf32swapphdrin - CVE-2018-6543: Fix integer overflow - CVE-2018-20671: Fix integer overflow vulnerability - CVE-2018-6759: Fix segmentation fault - CVE-2018-7208: Fix segmentation fault -...

Integer Overflow

GNU is vulnerable to integer overflows. The vulnerability exists in demangletemplate function in cplus-dem.c which causes a heap based overflow crashing the application...

EulerOS 2.0 SP8 : ncurses (EulerOS-SA-2021-2806)

According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow. CVE-2021-39537 Note that Tenabl...

EulerOS 2.0 SP8 : vim (EulerOS-SA-2021-2817)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3778, CVE-2021-3872, CVE-2021-3875 - vim is vulnerable to Use After Free CVE-2021-3796 Not...

CVE-2021-4136

A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution...

Heap overflow

An Improper Input Validation Vulnerability exists when reading a BMP file using Open Design Alliance Drawings SDK before 2022.12. Crafted data in a BMP file can trigger a write operation past the end of an allocated buffer, or lead to a heap-based buffer overflow. An attacker can leverage this...

Microsoft Windows tcpip.sys Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the tcpip.sys...

Open Design Alliance (ODA) Drawings Explorer BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

CVE-2021-4136

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-4136

vim is vulnerable to Heap-based Buffer Overflow...

Heap overflow

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-4136

CVE-2021-4136 is a Vim vulnerability described as a heap-based buffer overflow in Vim when processing crafted input, potentially crash or execute code. Connected sources (ALAS2023-2023-098 and macOS Big Sur/ Catalina advisories) list Vim with this CVE among multiple Vim issues and show remediatio...