ROS-20230621-02

A vulnerability in the LZWDecode function of the LibTIFF library is related to a null pointer dereferencing error in the libtiff/tiflzw.c file. Exploitation of the vulnerability could allow an attacker to create certain input data that could cause a program to dereference a NULL pointer when...

PT-2023-35877 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions ndpi search line, check ndpi detection func, and ndpi check flow...

Debian dla-3463 : opensc - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3463 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3463-1 [email protected]...

OSV-2023-500 Heap-buffer-overflow in stbiw__encode_png_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42525448 Crash type: Heap-buffer-overflow READ 1 Crash state: stbiwencodepngline stbiwritepngtomem Ogre::STBIImageCodec::encode...

OSV-2023-495 Heap-buffer-overflow in utf8ToUtf16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59884 Crash type: Heap-buffer-overflow WRITE 2 Crash state: utf8ToUtf16 utf8ToUtf16WithBom Lexer::getObj...

PT-2023-35873 · Git +1 · Poppler

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the functions utf8ToUtf16 and utf8ToUtf16WithBom, as well...

Fedora 38 : mingw-glib2 (2023-9e5a29a25d)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9e5a29a25d advisory. Update to glib2-2.74.7. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

MGASA-2023-0198 Updated cups packages fix security vulnerability

A heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service DoS attack. A buffer overflow vulnerability in the function 'formatlogline' could allow remote attackers to cause a DoS on the affected system. Exploitation of the vulnerability can be triggered when...

ROS-20230615-01

LibRaw image processing library vulnerability is related to heap buffer overflow in raw2imageex. Exploitation of the vulnerability could allow an attacker acting remotely to cause an application to application crash due to a maliciously crafted input file...

CVE-2023-34824

fdkaac before 1.0.5 was discovered to contain a heap buffer overflow in cafinfo function in cafreader.c...

CVE-2023-34824

fdkaac before 1.0.5 was discovered to contain a heap buffer overflow in cafinfo function in cafreader.c...

CVE-2023-34824

fdkaac before 1.0.5 was discovered to contain a heap buffer overflow in cafinfo function in cafreader.c...

CVE-2023-34824

fdkaac before 1.0.5 was discovered to contain a heap buffer overflow in cafinfo function in cafreader.c...

PT-2023-25015 · Fdkaac +4 · Fdkaac +4

Name of the Vulnerable Software and Affected Versions: fdkaac versions prior to 1.0.5 Description: A heap buffer overflow was discovered in the caf info function in caf reader.c. Recommendations: For versions prior to 1.0.5, update to version 1.0.5 or later to resolve the issue. As a temporary...

CVE-2023-34824

fdkaac before 1.0.5 was discovered to contain a heap buffer overflow in cafinfo function in cafreader.c...

CVE-2023-34824

CVE-2023-34824 affects fdkaac before 1.0.5, with a heap buffer overflow in caf_info within caf_reader.c. Public references across multiple feeds (NVD/OSV/Ubuntu/Nessus/OpenVAS) confirm the issue and link it to a memory handling weakness in caf_info. Impact is rated medium (CVSS v3.1: AV:L/AC:L/PR...

heap-buffer-overflow in function id3dmx_flush filters/reframe_mp3.c

Description Heap-buffer-overflow in MP4Box. Version bash MP4Box - GPAC version 2.3-DEV-revrelease c 2000-2023 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io Please cite our work in your research: GPAC Filters: https://doi.org/10.1145/3339825.3394929 GPAC:...

AutoDesk: CVE-2023-27911 Heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior

...

EulerOS Virtualization 3.0.6.0 : libtiff (EulerOS-SA-2023-2241)

According to the versions of the libtiff packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For use...

Microsoft Office Excel WebCharts out-of-bounds write vulnerability

Talos Vulnerability Report TALOS-2023-1734 Microsoft Office Excel WebCharts out-of-bounds write vulnerability June 13, 2023 CVE Number CVE-2023-33133 SUMMARY An access violation vulnerability exists in the WebCharts functionality of Microsoft Office Excel 2019 Plus version 2302 build 16130.20332....