PT-2024-40586 · Git +1 · Readstat

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read crash has been reported. The crash occurs in the following functions: extract mr data, parse mr string, and readstat parse sa...

Heap Buffer Overflow

SQLite-vec is vulnerable to a Heap Buffer Overflow. The vulnerability is due to improper handling of memory allocation in the npytokennext function, which allows for a heap buffer overflow when processing certain crafted files...

CVE-2024-9029 Freeimage: heap buffer overflow in tiff_read_iptc_profile

A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the readiptcprofile function in the Source/Metadata/IPTC.cpp file because the size of the profile is not being sanitized, causing a crash in the application linked to the library,...

ROS-20240927-02

A vulnerability in the Google Chrome browser is related to the execution of certain user interface gestures Exploitation of the vulnerability could allow an attacker acting remotely to perform a spoofed the user interface using a specially crafted HTML page A vulnerability in Google Chrome browse...

OSV-2024-1145 Heap-buffer-overflow in ultrahdr::getYuv444Pixel

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538160 Crash type: Heap-buffer-overflow READ 1 Crash state: ultrahdr::getYuv444Pixel std::1::function::funcultrahdr::JpegR::applyGainMap ultrahdr::JpegR::applyGainMap...

GHSA-VRCX-GX3G-J3H8 Heap-based Buffer Overflow in sqlite-vec

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

CVE-2024-46488

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

sqlite-vec 安全漏洞

sqlite-vec is a SQLite extension from the individual developer Alex Garcia. A security vulnerability exists in sqlite-vec version v0.1.1, which stems from the presence of a heap buffer overflow that allows an attacker to cause a denial of service DoS via a crafted file...

CVE-2024-46488

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

CVE-2024-46488

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

EulerOS 2.0 SP8 : binutils (EulerOS-SA-2024-2457)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in Binutils addr2line before 2.39.3, function parsemodule contains multiple out of bound reads which may cause a denial ...

EulerOS 2.0 SP8 : freerdp (EulerOS-SA-2024-2465)

According to the versions of the freerdp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in...

CVE-2024-7018

Heap buffer overflow in PDF in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: Medium...

CVE-2024-7018

Heap buffer overflow in PDF in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: Medium...

CVE-2024-7018

Heap buffer overflow in PDF in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: Medium...

CVE-2024-7018

CVE-2024-7018 describes a heap buffer overflow in PDF handling within Google Chrome prior to 124.0.6367.78, potentially allowing a remote attacker to trigger heap corruption via a crafted PDF. The issue originates in the Chromium-based PDF processing path and is documented across multiple feeds (...

PJSIP: Heap Buffer Overflow

Background PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Description Please review the CVE identifier referenced below for details. Impact Please review the CVE identifier...

GLSA-202409-05 : PJSIP: Heap Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-202409-05 PJSIP: Heap Buffer Overflow Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory. Note that Nessus has not...

OSV-2024-1124 Heap-buffer-overflow in ih264d_read_coeff4x4_cabac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538616 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dreadcoeff4x4cabac ih264dcabacparse8x8block ih264dparseresidual4x4cabac...

CBL Mariner 2.0 Security Update: xorg-x11-server (CVE-2024-21886)

The version of xorg-x11-server installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21886 advisory. - A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue...