PJSIP: Heap Buffer Overflow

Background PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Description Please review the CVE identifier referenced below for details. Impact Please review the CVE identifier...

OSV-2024-1124 Heap-buffer-overflow in ih264d_read_coeff4x4_cabac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538616 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dreadcoeff4x4cabac ih264dcabacparse8x8block ih264dparseresidual4x4cabac...

CBL Mariner 2.0 Security Update: xorg-x11-server (CVE-2024-21886)

The version of xorg-x11-server installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21886 advisory. - A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue...

PT-2024-40578 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is reported, with a crash type of Heap-buffer-overflow READ 4. The crash state involves several functions, including...

K000141126: Multiple FreeType vulnerabilities

Security Advisory Description CVE-2022-27404 FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfntinitface. CVE-2017-8287 FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow relate...

Fedora 39 : chromium (2024-37f95ce86b)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-37f95ce86b advisory. update to 128.0.6613.137 High CVE-2024-8636: Heap buffer overflow in Skia High CVE-2024-8637: Use after free in Media Router High CVE-2024-8638: Typ...

RLSA-2024:5941 Moderate: libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fixes: libvpx: Heap buffer overflow related to VP9 encoding CVE-2023-6349 libvpx: Integer overflow in vpximgalloc...

libvpx security update

An update is available for libvpx. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libvpx packages provide the VP8 SDK, which allows the encoding and decodin...

OSV-2024-1076 Heap-buffer-overflow in readBytes48

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538426 Crash type: Heap-buffer-overflow READ 1 Crash state: readBytes48 SystemZLLVMgetInstruction SystemZgetInstruction...

openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0302-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0302-1 advisory. Chromium 128.0.6613.137 released 2024-09-10 boo1230391 CVE-2024-8636: Heap buffer overflow in Skia CVE-2024-8637: Use after free in Media Router...

MicroPython 安全漏洞

MicroPython is a small open source Python programming language interpreter open-sourced by MicroPython. A security vulnerability exists in MicroPython version 1.23.0, which originates in the mpvfsumount function in the VFS Unmount Handler component, which compares a mount path string and an unmou...

OPENSUSE-SU-2024:0302-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 128.0.6613.137 released 2024-09-10 boo1230391 CVE-2024-8636: Heap buffer overflow in Skia CVE-2024-8637: Use after free in Media Router CVE-2024-8638: Type Confusion in V8 CVE-2024-8639: Use after free in Autofill...

Rocky Linux 8 : libvpx (RLSA-2024:5941)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:5941 advisory. libvpx: Heap buffer overflow related to VP9 encoding CVE-2023-6349 libvpx: Integer overflow in vpximgalloc CVE-2024-5197 Tenable has extracted the...

Fedora: Security Advisory (FEDORA-2024-0a4a65f805)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OESA-2024-2128 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: A...

OSV-2024-1066 Heap-buffer-overflow in StrLen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71496 Crash type: Heap-buffer-overflow READ 2 Crash state: StrLen MangleFileName ToolChainHarnessLib.c...

Chromium: CVE-2024-8636 Heap buffer overflow in Skia

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

OSV-2024-1053 Heap-buffer-overflow in gguf_get_tensor_offset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538148 Crash type: Heap-buffer-overflow READ 8 Crash state: ggufgettensoroffset llamamodelloader::llamatensorweight::llamatensorweight void std::1::vectorllamamodelloader::llamatensorweight, std::1::allocat...

macOS 13.x < 13.6.8 Multiple Vulnerabilities (120912)

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.6.8. It is, therefore, affected by multiple vulnerabilities: - A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt API. This flaw allows a...

SUSE SLES12: qemu / qemu-arm / qemu-audio-alsa / qemu-audio-oss / qemu-audio-pa / etc (SUSE-SU-2024:3229-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3229-1 advisory. - CVE-2024-3447: Fix heap buffer overflow in sdhciwritedataport. bsc1218485 - CVE-2023-6693: Fix stack buffer overflow in...