OSV-2023-445 Heap-buffer-overflow in LossyDctDecoder_execute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59457 Crash type: Heap-buffer-overflow READ 2 Crash state: LossyDctDecoderexecute DwaCompressoruncompress internalexrundodwaa...

CVE-2023-32324

OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service DoS attack. A buffer overflow vulnerability in the function formatlogline could allow remote attackers to cause a DoS ...

PUB-A-263783137

In encode of wlandata.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-264880969

In btmbleupdateinqresult of btmblegap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-33552

The CVE-2023-33552 issue affects erofs-utils v1.6, with a Heap Buffer Overflow in erofs_read_one_data (data.c) that can allow arbitrary code execution via a crafted erofs filesystem image. Public references in connected sources confirm the flaw and that Fedora/Mageia advisories backported fixes t...

PUB-A-264624283

In btmbleupdateinqresult of btmblegap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-263784118

In BuildSetTcsFci of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-250100597

In cdCodeMsg of cdcodec.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-33552

Heap Buffer Overflow in the erofsreadonedata function at data.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image...

CVE-2023-33551

The CVE-2023-33551 issue affects erofs-utils (v1.6 with the vulnerable erofsfsck_dirent_iter in fsck/main.c). It is a heap buffer overflow that allows remote code execution via a crafted erofs filesystem image. Public advisories indicate patches were released: Fedora backported a fix for this CVE...

PT-2023-24379 · Unknown +1 · Erofs-Utils +1

Name of the Vulnerable Software and Affected Versions: erofs-utils version 1.6 Description: The issue is related to a Heap Buffer Overflow in the erofsfsck dirent iter function in fsck/main.c. This allows remote attackers to execute arbitrary code via a crafted erofs filesystem image...

PT-2023-35854 · Git +1 · Openexr

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details include the LossyDctDecoder execute, DwaCompressor uncompress, and internal...

PUB-A-261365944

In xmlParseTryOrFinish of parser.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-263783635

In encode of miscdata.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-265149414

In the Google BMS kernel module, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-265276966

In ssProcessReturnResultComponent of ssMmConManagement.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-262235998

In multiple files, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.04 : CUPS vulnerability (USN-6128-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6128-1 advisory. It was discovered that CUPS incorrectly handled logging. A remote attacker could use this issue to cause CUPS to crash, resulting ...

Ubuntu 16.04 ESM : CUPS vulnerability (USN-6128-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6128-2 advisory. USN-6128-1 fixed a vulnerability in CUPS. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the preceding description bloc...

OSV-2023-444 Heap-buffer-overflow in opj_jp2_apply_pclr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59450 Crash type: Heap-buffer-overflow READ 4 Crash state: opjjp2applypclr opjjp2decode cv::detail::Jpeg2KOpjDecoderBase::readData...