Denial Of Service (DoS)

libtiff.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to a heap-buffer-overflow in extractContigSamplesShifted24bits of tiffcrop.c, allowing an attacker to cause an application crash through a maliciously crafted tiff file...

OSV-2023-80 Heap-buffer-overflow in set_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56037 Crash type: Heap-buffer-overflow READ Crash state: setdata refpkt gitpktparseline...

OSV-2023-78 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56054 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2023-79 Heap-buffer-overflow in H5O__fsinfo_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56076 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Ofsinfodecode H5Omsgiteratereal H5Omsgremovereal...

OSV-2023-77 Heap-buffer-overflow in H5C__load_cache_image

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56075 Crash type: Heap-buffer-overflow READ 4 Crash state: H5Cloadcacheimage H5Cprotect H5ACprotect...

OSV-2023-75 Heap-buffer-overflow in isvcd_interlyr_motion_mode_pred_dyadic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56050 Crash type: Heap-buffer-overflow READ 1 Crash state: isvcdinterlyrmotionmodepreddyadic isvcdmvpredreftfrnby2epmb isvcdparseinterslicedatacabacenhlyr...

OSV-2023-72 Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56057 Crash type: Heap-buffer-overflow WRITE 4 Crash state: perfetto::traceprocessor::TrackEventParser::ParseTrackDescriptor perfetto::traceprocessor::TrackEventModule::ParseTracePacketData...

Denial Of Service (DoS)

clamav is vulnerable to denial of service DoS. A missing buffer size check results in a heap buffer overflow write, an attacker could submit a crafted HFS+ partition file allowing them to execute arbitrary code resulting in a system crash...

PT-2023-35978 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves several functions, including isvcd interlyr motion mode pred dyadic, isvcd mv...

PT-2023-35987 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the function names H5C load cache image, H5C protect, and H5AC protect. Recommendations: At...

PT-2023-35992 · Git +1 · Libucl

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details include a crash state involving ucl object dtor unref single, ucl object dto...

PT-2023-35998 · Git +1 · Libgit2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap buffer overflow read. Technical details include a crash type of Heap-buffer-overflow READ and a crash state involving...

PT-2023-35963 · Perfetto · Perfetto

Name of the Vulnerable Software and Affected Versions: perfetto affected versions not specified Description: The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the perfetto::trace processor::TrackEventParser::ParseTrackDescriptor function, the...

OSV-2023-68 Heap-buffer-overflow in isvcd_residual_samp_mb_dyadic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56023 Crash type: Heap-buffer-overflow READ 2 Crash state: isvcdresidualsampmbdyadic isvcdprocessresidualresamplemb isvcdprocessintermbrsdpredtargetlyr...

OSV-2023-66 Heap-buffer-overflow in mosquitto__strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56008 Crash type: Heap-buffer-overflow READ Crash state: mosquittostrdup configreadfilecore configreadfile...

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap buffer overflow in the gfisomboxsize function of boxfuncs.c, allowing an attacker to cause an application crash...

PT-2023-35945 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 2 crash has been reported. The crash involves the following functions: isvcd residual samp mb dyadic, isvcd process residual...

Siemens Solid Edge 缓冲区错误漏洞

Siemens Solid Edge is a 3D CAD software from Siemens, a German company. Siemens Solid Edge is vulnerable to heap buffer overflow, which can be exploited by attackers to execute code in the context of the current process...

Adobe Animate Heap Buffer Overflow Vulnerability (CNVD-2023-13732)

Adobe Animate is a set of Flash animation software from Adobe. Adobe Animate is vulnerable to a heap buffer overflow vulnerability that could be exploited to execute arbitrary code in the context of the current user...

Siemens Solid Edge 缓冲区错误漏洞

Siemens Solid Edge is a 3D CAD software from Siemens, a German company. Siemens Solid Edge is vulnerable to heap buffer overflow, which can be exploited by attackers to execute code in the context of the current process...