20329 matches found
CVE-2020-18768
LibTIFF 4.0.10 has a heap-based buffer overflow in _TIFFmemcpy (tif_unix.c) that can cause denial of service when processing crafted TIFF files (CVE-2020-18768). Connected advisories (OpenVAS/Nessus) corroborate the vulnerability and list affected platforms; remediation is to upgrade to a newer L...
CVE-2022-44840
CVE-2022-44840: A heap/denial-of-service vulnerability in GNU Binutils readelf.c (find_section_in_set) affects readelf up to version before 2.40. A locally authenticated attacker could craft input to trigger a heap-based buffer overflow, potentially causing a crash or denial of service. Public de...
CVE-2022-47069
p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur...
CVE-2022-44840
Heap buffer overflow vulnerability in binutils readelf before 2.40 via function findsectioninset in file readelf.c...
CVE-2022-28068
CVE-2022-28068 affects radare2 5.4.0 and 5.4.2, due to a heap overflow in the r_sleb128 function. The vulnerability is confirmed by multiple sources in connected docs; a practical workaround is to disable the r_sleb128 function for versions 5.4.0–5.4.2 until a patch is released (per PT-2023-12931...
CVE-2022-44840
Heap buffer overflow vulnerability in binutils readelf before 2.40 via function findsectioninset in file readelf.c...
CVE-2022-45703
CVE-2022-45703 is a heap buffer overflow in GNU binutils' readelf tool (readelf.c, display_debug_section) affecting readelf before 2.40. The vulnerability could lead to arbitrary code execution or a crash per the description; the issue is addressed by upgrading to binutils 2.40 or newer. Exploita...
CVE-2022-28069
CVE-2022-28069 affects radare2, specifically heap overflow in vax_opfunction for versions 5.4.0 and 5.4.2. Root cause reported as a heap buffer overflow in the vax_opfunction function. Public references consistently describe this vulnerability in radare2 5.4.0/5.4.2; no explicit fix version is pr...
CVE-2021-33388
CVE-2021-33388 affects the dpic package: the 2021.04.10 release contains a Heap Buffer Overflow in the makevar() function (dpic.y) . CVSSv3.1 base score 9.8 (CRITICAL) with network attack vector, no user interaction. Several connected sources confirm the issue and note remediation status varies b...
CVE-2022-47069
p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur...
CVE-2022-28068
A heap buffer overflow in rsleb128 function in radare2 5.4.2 and 5.4.0...
CVE-2022-28072
A heap buffer overflow in rreadle32 function in radare25.4.2 and 5.4.0...
CVE-2022-28072
A heap buffer overflow in rreadle32 function in radare25.4.2 and 5.4.0...
CVE-2021-33388
dpic 2021.04.10 has a Heap Buffer Overflow in themakevar function in dpic.y...
CVE-2022-47069
p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur...
PT-2023-11494 · Binaryen · Binaryen
Name of the Vulnerable Software and Affected Versions: Binaryen version 1.38.26 Description: A heap-buffer-overflow issue exists in the wasm::WasmBinaryBuilder::visitBlockwasm::Block function in src/wasm/wasm-binary.cpp. This can be triggered by a crafted wasm input, leading to a segmentation fau...
CVE-2021-33388
dpic 2021.04.10 has a Heap Buffer Overflow in themakevar function in dpic.y...
CVE-2022-28072
A heap buffer overflow in rreadle32 function in radare25.4.2 and 5.4.0...