CVE-2022-42499

In smsSendMmCpErrMsg of smsMmConManagement.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2021-43315

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5349...

CVE-2022-42499

CVE-2022-42499 affects the Android modem component sms_MmConManagement.c, where a heap buffer overflow can cause an out-of-bounds write. This vulnerability could enable remote code execution with no privileges and no user interaction required. Publicly available details in the Red Hat, NVD, and C...

CVE-2023-21019

CVE-2023-21019 affects Android 13 components, specifically a heap buffer overflow in ih264e_init_proc_ctxt within ih264e_process.c that can cause an out-of-bounds read and local information disclosure without requiring user interaction or elevated privileges. The vulnerability is documented with ...

CVE-2023-21075

In getsvchash of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

OSV-2023-216 Heap-buffer-overflow in H5G__node_cmp3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57305 Crash type: Heap-buffer-overflow READ 5 Crash state: H5Gnodecmp3 H5Bfind H5Gstablookup...

CVE-2023-27249

swfdump v0.9.2 was discovered to contain a heap buffer overflow in the function swfGetPlaceObject at swfobject.c...

CVE-2023-27249

swfdump v0.9.2 was discovered to contain a heap buffer overflow in the function swfGetPlaceObject at swfobject.c...

PT-2023-35724 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: The issue is related to a heap buffer overflow read. Technical details about the crash include the H5G node cmp3, H5B find, and H5G stab lookup functions. Recommendations: At the moment, there...

CVE-2023-27249

swfdump v0.9.2 was discovered to contain a heap buffer overflow in the function swfGetPlaceObject at swfobject.c...

swfdump 缓冲区错误漏洞

swfdump is a utility program for working with Adobeu200bu200be Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in swfdump version v0.9.2, which stems from the inclusion of a heap buffer overflow in the function swfGetPlaceObject in swfobject.c...

CVE-2023-27249

CVE-2023-27249 affects swfdump v0.9.2. The vulnerability is a heap buffer overflow in the function swf_GetPlaceObject located in swfobject.c. Documented impact indicates a likely impact on availability, with no information about exploitation status in the provided sources. Public-reported advisor...

Google Chrome Security Update (stable-channel-update-for-desktop_20-2021-07) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2023-27249

swfdump v0.9.2 was discovered to contain a heap buffer overflow in the function swfGetPlaceObject at swfobject.c...

Medium: bash

Issue Overview: A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parametertransform. This issue may lead to memory problems. CVE-2022-3715 Affected Packages: bash Issue Correction: Run dnf update bash --releasever 2023.0.20230322 or dnf update --advisory...

Important: libtiff

Issue Overview: A flaw was found in libtiff where a NULL source pointer passed as an argument to the memcpy function within the TIFFFetchStripThing in tifdirread.c. This flaw allows an attacker with a crafted TIFF file to exploit this flaw, causing a crash and leading to a denial of service...

SUSE SLES15: qemu / qemu-SLOF / qemu-arm / qemu-audio-alsa / qemu-audio-pa / etc (SUSE-SU-2023:0840-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0840-1 advisory. - CVE-2022-4144: Fixed unsafe address translation can lead to out-of-bounds read in qxlphys2virt bsc1205808. - CVE-2021-3507: Fixed...

Low: binutils

Issue Overview: In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-new via a crafted file. CVE-2022-38533 Affected Packages: binutils Issue Correction: Run dnf update binutils --releasever 2023.0.20230322 o...

Important: freetype

Issue Overview: A heap buffer overflow leading to out-of-bounds write was found in freetype. Memory allocation based on truncated PNG width and height values allows for an out-of-bounds write to occur in application memory when an attacker supplies a specially crafted TTF file. CVE-2020-15999 A...

Amazon Linux 2023 : binutils, binutils-devel, binutils-gprofng (ALAS2023-2023-119)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-119 advisory. In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-new via a crafted file. CVE-2022-38533 Tenable has extracted...