CVE-2023-34318

CVE-2023-34318: SoX has a heap-based buffer overflow in the startread function (hcom.c:160:41). Affected versions include SoX 14.4.2 and earlier; impact includes denial of service, potential code execution, and information disclosure. Remediation is available via distro advisories (e.g., openSUSE...

CVE-2023-34318 Heap-buffer-overflow in src/hcom.c

A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code execution, or information disclosure...

CVE-2023-34318

A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code execution, or information disclosure...

CVE-2023-34318 Heap-buffer-overflow in src/hcom.c

A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code execution, or information disclosure...

OSV-2023-555 Heap-buffer-overflow in Gfx::InputStreamer::read_u24

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60465 Crash type: Heap-buffer-overflow READ 1 Crash state: Gfx::InputStreamer::readu24 AK::Function Gfx::BMPImageDecoderPlugin::frame...

OSV-2023-554 Heap-buffer-overflow in OT::CmapSubtable::get_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60475 Crash type: Heap-buffer-overflow READ 2 Crash state: OT::CmapSubtable::getglyph bool OT::cmap::acceleratort::getglyphfrom hbotgetnominalglyphs...

OSV-2023-551 Heap-buffer-overflow in OT::CmapSubtable::collect_unicodes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60467 Crash type: Heap-buffer-overflow READ 2 Crash state: OT::CmapSubtable::collectunicodes hbfacecollectunicodes test-ot-face.c...

PT-2023-35901 · Git +1 · Harfbuzz

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the get glyph function in OT::CmapSubtable, the get...

PT-2023-35900 · Git +1 · Harfbuzz

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details include the crash type being a Heap-buffer-overflow READ 2, and the crash...

OESA-2023-1402 libtiff security update

This libtiff provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libti...

CLSA-2023-1688677908 Fix CVE(s): CVE-2021-45078

SECURITY UPDATE: heap-buffer-overflow - debian/patches/CVE-2021-45078.patch: fix out-of-bounds write in stabxcoffbuiltintype bz: 28694 - CVE-2021-45078...

PT-2023-21093 · Diagon · Diagon

Name of the Vulnerable Software and Affected Versions: Diagon version 1.0.139 Description: A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality. This issue can be triggered by a specially crafted markdown file or network request, potentially leading to arbitra...

ImageMagick 缓冲区错误漏洞

ImageMagick is a set of open-source image processing software from the American company ImageMagick. The software can read, convert, or write images in a variety of formats. A security vulnerability exists in ImageMagick, which originates from a heap buffer overflow in coders/tiff.c. The...

OSV-2023-538 Heap-buffer-overflow in Gfx::BooleanDecoder::initialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60262 Crash type: Heap-buffer-overflow READ 7 Crash state: Gfx::BooleanDecoder::initialize Video::VP9::FrameContext::createrangedecoder Video::VP9::Parser::compressedheader...

OSV-2023-536 Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60274 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5Parser::ParseHeader Assimp::MD5::MD5Parser::MD5Parser Assimp::MD5Importer::LoadMD5MeshFile...

PT-2023-35894 · Git +1 · Serenity

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, associated with a crash type. The crash state involves functions such as Gfx::BooleanDecoder::initialize...

Amazon Linux 2 : opensc (ALAS-2023-2102)

The version of opensc installed on the remote host is prior to 0.19.0-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2102 advisory. A heap use after free issue was found in Opensc before version 0.22.0 in scfilevalid. CVE-2021-42779 A use after return...

OSV-2023-527 Heap-buffer-overflow in default_get_outline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60207 Crash type: Heap-buffer-overflow READ 4 Crash state: defaultgetoutline pdfifapigetglyph getfapiglyphdata...

PT-2023-35890 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported. The crash involves the following functions: default get outline, pdfi fapi get glyph, and get fapi...

openSUSE 15 Security Update : gifsicle (openSUSE-SU-2023:0160-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0160-1 advisory. - Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguityerror component at /src/clp.c. CVE-2023-36193 Note that Nessus has no...