CVE-2022-44840

Heap buffer overflow vulnerability in binutils readelf before 2.40 via function findsectioninset in file readelf.c...

CVE-2022-28068

A heap buffer overflow in rsleb128 function in radare2 5.4.2 and 5.4.0...

CVE-2022-28072

The CVE-2022-28072 entry concerns a heap buffer overflow in the r_read_le32 function present in radare25.4.2 and 5.4.0. Multiple connected sources corroborate the same underlying issue affecting radare2/radare25 code paths, with the vulnerability described as a heap overflow in the targeted r_rea...

CVE-2020-18768

There exists one heap buffer overflow in TIFFmemcpy in tifunix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file...

CVE-2022-28069

A heap buffer overflow in vaxopfunction in radare2 5.4.2 and 5.4.0...

CVE-2022-28072

A heap buffer overflow in rreadle32 function in radare25.4.2 and 5.4.0...

CVE-2022-28069

A heap buffer overflow in vaxopfunction in radare2 5.4.2 and 5.4.0...

OSV-2023-717 Heap-buffer-overflow in bit_TV_to_utf8_codepage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61593 Crash type: Heap-buffer-overflow READ 1 Crash state: bitTVtoutf8codepage bitTVtoutf8 dwgdecodeLAYOUTprivate...

Chromium: CVE-2023-4353 Heap buffer overflow in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-4362 Heap buffer overflow in Mojom IDL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

PT-2023-4643 · Notepad++ · Notepad++

Name of the Vulnerable Software and Affected Versions: Notepad++ versions 8.5.6 and prior Description: The issue is related to a heap buffer write overflow in the Utf8 16 Read::convert function, which may lead to arbitrary code execution when a user opens a specially crafted file. This can...

PT-2023-35961 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions bit TV to utf8 codepage, bit TV to utf8, and dwg decode LAYOUT...

Medium: exiv2

Issue Overview: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted...

Medium: qemu

Issue Overview: A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtiocryptohandlesymreq. There is no check for the value of srclen and dstlen in virtiocryptosymophelper, potentially leading to a heap buffer overflow when the two values...

OSV-2023-710 Heap-buffer-overflow in Flow::dissectMDNS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61538 Crash type: Heap-buffer-overflow READ 10 Crash state: Flow::dissectMDNS NetworkInterface::processPacket NetworkInterface::dissectPacket...

PT-2023-35958 · Git +1 · Ntopng

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. The crash occurs in the Flow::dissectMDNS function, which is called by...

Fedora 37 : chromium (2023-6c8de2cd15)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-6c8de2cd15 advisory. update to 115.0.5790.170. Fixes several security issues Tenable has extracted the preceding description block directly from the Fedora security...

Denial Of Service (DoS)

libpoppler.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap buffer overflow in the FoFiType1C::cvtGlyph function of fofi/FoFiType1C.cc, allowing an attacker to cause an application crash...

PT-2023-4578 · Wibu · Wibu Codemeter Runtime

Name of the Vulnerable Software and Affected Versions: Wibu CodeMeter Runtime versions up to 7.60b Description: The issue is related to a heap buffer overflow vulnerability in the Wibu CodeMeter Runtime network service. This vulnerability can be exploited by an unauthenticated, remote attacker to...

CVE-2023-4362

Heap buffer overflow in Mojom IDL in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process and gained control of a WebUI process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...