20329 matches found
PT-2023-35930 · Git +1 · Libredwg
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is reported, with a crash type indicating a heap-buffer-overflow READ 1. The crash state involves functions such as bit...
chromium -- multiple vulnerabilities
Chrome Releases reports: This update includes 17 security fixes: 1466183 High CVE-2023-4068: Type Confusion in V8. Reported by Jerry on 2023-07-20 1465326 High CVE-2023-4069: Type Confusion in V8. Reported by Man Yue Mo of GitHub Security Lab on 2023-07-17 1462951 High CVE-2023-4070: Type Confusi...
Security update for libredwg (important)
openSUSE Security Update: Security update for libredwg Announcement ID: openSUSE-SU-2023:0201-1 Rating: important References: 1200898 1212705 1212706 1212707 1212709 Cross-References: CVE-2022-33025 CVE-2023-36271 CVE-2023-36272 CVE-2023-36273 CVE-2023-36274 CVSS scores: CVE-2022-33025 NVD : 7.8...
OSV-2023-631 Heap-buffer-overflow in test_verify
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60971 Crash type: Heap-buffer-overflow READ Crash state: testverify fuzzpkcs11.c...
PT-2023-35929 · Git +1 · Opensc
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash occurs in the test verify function within the fuzz pkcs11.c file. No information is...
Heap overflow
Heap buffer overflow in Blink in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2022-4920
Heap buffer overflow in Blink in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2022-4920
CVE-2022-4920 is a heap-based buffer overflow in Blink affecting Google Chrome up to version 101.0.4951.41. A remote attacker could lure a user into specific UI gestures via a crafted HTML page to potentially escape the Chrome sandbox. The vulnerability is confirmed across multiple connected advi...
CVE-2022-4920
Heap buffer overflow in Blink in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2022-4914
CVE-2022-4914 is a heap buffer overflow in Chrome’s PrintPreview (Chromium) prior to 104.0.5112.79. The issue allows an attacker, by convincing a user to install a malicious extension and visit a crafted HTML page, to potentially cause heap corruption. Affected software is Google Chrome (Chromium...
CVE-2022-4914
Heap buffer overflow in PrintPreview in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
SUSE-SU-2023:2987-1 Security update for iperf
This update for iperf fixes the following issues: - CVE-2023-38403: Fixed integer overflow leading to heap buffer overflow bsc1213430...
Heap buffer overflow in PaddlePaddle
Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible...
PYSEC-2023-124
Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible...
CVE-2023-38671 Heap buffer overflow in paddle.trace
Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible...
CVE-2023-38671
CVE-2023-38671 describes a heap buffer overflow in PaddlePaddle's paddle.trace, affecting PaddlePaddle prior to version 2.5.0. The underlying issue allows heap-based corruption that can lead to denial of service and information disclosure (as stated by multiple sources); there is no explicit expl...
EulerOS Virtualization 3.0.6.6 : libtiff (EulerOS-SA-2023-2429)
According to the versions of the libtiff packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For use...
EulerOS Virtualization 3.0.6.6 : binutils (EulerOS-SA-2023-2405)
According to the versions of the binutils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain...
