20112 matches found
CVE-2023-28527
CVE-2023-28527 affects IBM Informix Dynamic Server 12.10/14.10, specifically the cdr component. The issue is a heap buffer overflow caused by improper bounds checking, leading to a local user potentially triggering a segmentation fault. IBM bulletin and IBM X-Force describe the impact as local, w...
OSV-2023-1272 Heap-buffer-overflow in OT::cff2::accelerator_templ_t<CFF::cff2_private_dict_opset_t, CFF::cff2_private_
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64859 Crash type: Heap-buffer-overflow READ 2 Crash state: OT::cff2::acceleratortempltCFF::cff2privatedictopsett, CFF::cff2private hbotdrawglyph hbfontdrawglyph...
PT-2023-35633 · Git +1 · Harfbuzz
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue has been identified, potentially causing a crash. The crash type is specified as Heap-buffer-overflow READ 2. The crash...
CVE-2023-46932
CVE-2023-46932 affects GPAC, specifically the GPAC multimedia platform’s MP4Box tool. The vulnerability is a Heap Buffer Overflow in the str2ulong path within src/media_tools/avilib.c (GPAC, master branch 2.3-DEV rev617-g671976fcc). Impact stated: attackers can potentially execute arbitrary code ...
PT-2023-35632 · Git +1 · Selinux
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash state includes is decl requires met, enable avrules, and link modules. No informatio...
IBM Informix Dynamic Server Buffer Error Vulnerability
IBM Informix Dynamic Server IDS is a scalable object-relational database server from International Business Machines IBM that provides clustered data centers with features such as continuous data availability and disaster recovery. A security vulnerability exists in IBM Informix Dynamic Server...
CVE-2023-46932
Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitrary code and cause a denial of service DoS via str2ulong class in src/mediatools/avilib.c in gpac/MP4Box...
CVE-2023-48403
In smsDecodeCodedTpMsg of smsPduCodec.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure if the attacker is able to observe the behavior of the subsequent switch conditional with no additional execution privileges needed. User...
Heap overflow
In smsDecodeCodedTpMsg of smsPduCodec.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure if the attacker is able to observe the behavior of the subsequent switch conditional with no additional execution privileges needed. User...
CVE-2023-48403
Summary: CVE-2023-48403 describes a possible out-of-bounds read due to a heap buffer overflow in the function sms_DecodeCodedTpMsg of sms_PduCodec.c. This could enable remote information disclosure without user interaction, as exploitation does not require additional privileges. The vulnerability...
Heap Buffer Overflow
Libde265 is vulnerable to heap-buffer-overflow. The vulnerability is due to the derivecombinedbipredictivemergingcandidates function in motion.cc, which results in heap-buffer-overflow...
Heap Buffer Overflow
Libde265 is vulnerable to heap-buffer-overflow. The vulnerability is due to the derivespatiallumavectorprediction function in motion.cc which results in heap-buffer-overflow...
OSV-2023-1267 Heap-buffer-overflow in dwg_free_object
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64829 Crash type: Heap-buffer-overflow READ 8 Crash state: dwgfreeobject dwgfree llvmfuzz.c...
PT-2023-35630 · Git +1 · Libredwg
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read 8 crash has been reported. The crash state includes dwg free object, dwg free, and llvmfuzz.c. Recommendations: At the moment...
CVE-2023-49467
Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derivecombinedbipredictivemergingcandidates function at motion.cc...
CVE-2023-49465
Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function at motion.cc...
CVE-2023-49465
Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function at motion.cc...
DEBIAN-CVE-2023-49467
Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derivecombinedbipredictivemergingcandidates function at motion.cc...