20067 matches found
CVE-2023-52356
A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service...
CVE-2023-52356
A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service...
CVE-2023-52356 Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service...
CVE-2023-52356
CVE-2023-52356 is a heap-based buffer overflow in libtiff triggered by crafted TIFF files via TIFFReadRGBATileExt(), leading to DoS. Public docs confirm libtiff as affected; related advisories note versions below 4.6.0-2 are vulnerable and patches are available. Remediation: upgrade libtiff to 4....
CVE-2023-52356 Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service...
CVE-2023-52356 Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service...
Moderate: Red Hat Security Advisory: sqlite security update
An update for sqlite is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
OSV-2024-39 Heap-buffer-overflow in simdutf::westmere::implementation::convert_utf8_to_utf32
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66063 Crash type: Heap-buffer-overflow WRITE 16 Crash state: simdutf::westmere::implementation::convertutf8toutf32 roundtrip.cc...
OSV-2024-38 Heap-buffer-overflow in json_HEADER
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66046 Crash type: Heap-buffer-overflow WRITE 2 Crash state: jsonHEADER dwgreadjson llvmfuzz.c...
Moderate: sqlite security update
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...
PT-2024-40745 · Git +1 · Simdutf
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap buffer overflow issue was identified, specifically a WRITE 16 error, which occurred in the simdutf::westmere::implementation::convert utf8 to utf3...
RHEL 8 : freetype (RHSA-2024:0420)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0420 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual...
ALSA-2024:0465 Moderate: sqlite security update
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...
OSV-2024-33 Heap-buffer-overflow in ctxload_probe_data
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66032 Crash type: Heap-buffer-overflow READ Crash state: ctxloadprobedata gffilterpidrawnew fileinprocess...
[SECURITY] [DLA 3712-1] kodi security update
Debian LTS Advisory DLA-3712-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA January 17, 2024 https://wiki.debian.org/LTS Package : kodi Version : 2:17.6+dfsg1-4+deb10u1 CVE ID : CVE-2017-5982 CVE-2021-42917 CVE-2023-23082 CVE-2023-30207 Multiple vulnerabilities hav...
Debian dla-3712 : kodi - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3712 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3712-1 [email protected]...
Amazon Linux 2 : GraphicsMagick (ALASGRAPHICSMAGICK1.3-2023-001)
The version of GraphicsMagick installed on the remote host is prior to 1.3.38-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2GRAPHICSMAGICK1.3-2023-001 advisory. In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. CVE-2022-1270 Tenable has extracted...
Important: Red Hat Security Advisory: xorg-x11-server security update
An update for xorg-x11-server is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...
CVE-2024-22211
FreeRDP is a collection of remote desktop protocol library and client software that is both free and open source. An integer overflow within freerdpbitmapplanarcontextreset results in a heap-buffer overflow. This impacts clients built on FreeRDP. However, server implementations and proxies based ...