OSV-2023-723 Heap-buffer-overflow in H5MM_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61626 Crash type: Heap-buffer-overflow WRITE Crash state: H5MMmemcpy H5Dscattermem H5Dscatgathread...

OSV-2023-722 Heap-buffer-overflow in H5MM_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61625 Crash type: Heap-buffer-overflow READ Crash state: H5MMmemcpy H5Ocachechkserialize H5Cgenerateimage...

CVE-2022-44840

Heap buffer overflow vulnerability in binutils readelf before 2.40 via function findsectioninset in file readelf.c...

CVE-2022-45703

CVE-2022-45703 is a heap buffer overflow in GNU binutils' readelf tool (readelf.c, display_debug_section) affecting readelf before 2.40. The vulnerability could lead to arbitrary code execution or a crash per the description; the issue is addressed by upgrading to binutils 2.40 or newer. Exploita...

CVE-2022-28068

CVE-2022-28068 affects radare2 5.4.0 and 5.4.2, due to a heap overflow in the r_sleb128 function. The vulnerability is confirmed by multiple sources in connected docs; a practical workaround is to disable the r_sleb128 function for versions 5.4.0–5.4.2 until a patch is released (per PT-2023-12931...

CVE-2020-18768

LibTIFF 4.0.10 has a heap-based buffer overflow in _TIFFmemcpy (tif_unix.c) that can cause denial of service when processing crafted TIFF files (CVE-2020-18768). Connected advisories (OpenVAS/Nessus) corroborate the vulnerability and list affected platforms; remediation is to upgrade to a newer L...

CVE-2021-33388

CVE-2021-33388 affects the dpic package: the 2021.04.10 release contains a Heap Buffer Overflow in the makevar() function (dpic.y) . CVSSv3.1 base score 9.8 (CRITICAL) with network attack vector, no user interaction. Several connected sources confirm the issue and note remediation status varies b...

CVE-2022-44840

CVE-2022-44840: A heap/denial-of-service vulnerability in GNU Binutils readelf.c (find_section_in_set) affects readelf up to version before 2.40. A locally authenticated attacker could craft input to trigger a heap-based buffer overflow, potentially causing a crash or denial of service. Public de...

CVE-2022-47069

p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur...

CVE-2022-28069

CVE-2022-28069 affects radare2, specifically heap overflow in vax_opfunction for versions 5.4.0 and 5.4.2. Root cause reported as a heap buffer overflow in the vax_opfunction function. Public references consistently describe this vulnerability in radare2 5.4.0/5.4.2; no explicit fix version is pr...

CVE-2022-28072

A heap buffer overflow in rreadle32 function in radare25.4.2 and 5.4.0...

CVE-2022-28068

A heap buffer overflow in rsleb128 function in radare2 5.4.2 and 5.4.0...

CVE-2022-47069

p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur...

CVE-2022-44840

Heap buffer overflow vulnerability in binutils readelf before 2.40 via function findsectioninset in file readelf.c...

CVE-2021-33388

dpic 2021.04.10 has a Heap Buffer Overflow in themakevar function in dpic.y...

PT-2023-11494 · Binaryen · Binaryen

Name of the Vulnerable Software and Affected Versions: Binaryen version 1.38.26 Description: A heap-buffer-overflow issue exists in the wasm::WasmBinaryBuilder::visitBlockwasm::Block function in src/wasm/wasm-binary.cpp. This can be triggered by a crafted wasm input, leading to a segmentation fau...

CVE-2022-28072

A heap buffer overflow in rreadle32 function in radare25.4.2 and 5.4.0...

CVE-2022-28072

A heap buffer overflow in rreadle32 function in radare25.4.2 and 5.4.0...

CVE-2021-33388

dpic 2021.04.10 has a Heap Buffer Overflow in themakevar function in dpic.y...

CVE-2022-47069

p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur...