OSV-2023-1079 Heap-buffer-overflow in Calc_Length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63648 Crash type: Heap-buffer-overflow READ 1 Crash state: CalcLength RunIns InstanceReset...

PT-2023-35551 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash state includes functions such as Calc Length, RunIns, and Instance Reset. Recommendation...

CVE-2023-40128

In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40129

In buildreadmultirsp of gattsr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40129

In buildreadmultirsp of gattsr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

Heap overflow

In buildreadmultirsp of gattsr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40129

In buildreadmultirsp of gattsr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40129

CVE-2023-40129 describes a heap-based out-of-bounds write in the Bluetooth stack (build_read_multi_rsp in gatt_sr.cc) that enables remote code execution with no user interaction. The NVD entry and Android security documentation indicate an adjacent attack vector with high impact and a base CVSS v...

CVE-2023-40128

CVE-2023-40128 is an Android elevation-of-privilege weakness caused by an out-of-bounds write (heap buffer overflow) in xmlregexp.c. The vulnerability enables local privilege escalation without extra user interaction. Public details in the provided documents do not specify affected products/versi...

CVE-2023-40128

In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40128

In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40129

In buildreadmultirsp of gattsr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

OSV-2023-1073 Heap-buffer-overflow in H5D__scatter_mem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63610 Crash type: Heap-buffer-overflow WRITE Crash state: H5Dscattermem H5Dscatgathread H5Dcontigread...

openSUSE 15 Security Update : sox (openSUSE-SU-2023:0329-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0329-1 advisory. - An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h startread function, there is an integer overflow on the result of integer...

PT-2023-35549 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow issue has been identified, which can cause a crash. The crash occurs due to a write operation in the heap buffer. Technical details about the crash include the involveme...

OSV-2023-1068 Heap-buffer-overflow in iasecc_parse_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63587 Crash type: Heap-buffer-overflow READ 1 Crash state: iaseccparsesize iaseccparsegettlv iaseccparsedocp...

PT-2023-35543 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the iasecc parse size, iasecc parse get tlv, and iasecc parse docp functions. No...

CVE-2023-5367

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing f...

CVE-2023-5367 Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing f...

CVE-2023-5367

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing f...