PYSEC-2021-203

TensorFlow is an end-to-end open source platform for machine learning. An attacker can write outside the bounds of heap allocated arrays by passing invalid arguments to tf.rawops.Dilation2DBackpropInput. This is because the...

PYSEC-2021-692

TensorFlow is an end-to-end open source platform for machine learning. An attacker can write outside the bounds of heap allocated arrays by passing invalid arguments to tf.rawops.Dilation2DBackpropInput. This is because the...

XnView RGB File Handling Buffer Overflow Vulnerability

XnView is a multi-platform image viewing software developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphics and video files. A remote buffer overflow vulnerability exists in XnView, which originates when the program does...

XnView Buffer Overflow Vulnerability (CNVD-2020-50140)

XnView is a multi-platform image viewing software developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphics and video files. A buffer overflow vulnerability exists in XnView version 2.04, which originates when the progra...

Unbreakable Enterprise kernel security update

4.1.12-124.30.1 - xen: let allocxenballoonedpages fail if not enough memory free Juergen Gross Orabug: 30073695 - mm/pagealloc.c: calculate 'available' memory in a separate function Igor Redko Orabug: 30073695 - Input: gtco - bounds check collection indent level Grant Hernandez Orabug: 30074413...

Marklogic AntennaHouse DMC Heap Buffer Overflow Vulnerability

Marklogic is a NoSQL database from the American company Marklogic. A heap buffer overflow vulnerability exists in Marklogic versions 8.0-5.5, which stems from the program failing to adequately perform bounds detection on user-submitted input. An attacker could exploit this vulnerability to execut...

PCRE Local Stack Buffer Overflow Vulnerability

PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. PCRE suffers from a local stack buffer overflow vulnerability due to the program's failure to perform sufficient bounds checking on...

Liblouis Stack Buffer Overflow Vulnerability

Liblouis is an open-source Braille translator written in C. It can be used to translate Braille into other languages. A stack buffer overflow vulnerability exists in Liblouis that stems from the program failing to properly perform boundary detection on user-submitted input. A remote attacker coul...

Wireshark DOF Parser Buffer Overflow Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. The Wireshark DOF parser suffers from a buffer overflow vulnerability due to a failure t...

DCMTK Stack Buffer Overflow Vulnerability

DCMTK is a medical image programming tool. DCMTK suffers from a stack buffer overflow vulnerability. Due to the program failing to perform proper boundary checks on user-supplied input. An attacker can exploit this vulnerability to execute arbitrary code within the context of the affected...

JasPer heap buffer overflow vulnerability (CNVD-2016-11816)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A heap buffer overflow vulnerability exists in JasPer, which arises from the program's failure to perform sufficient bounds checking on user-submitted input. A remote attacker cou...

Linux Kernel Local Buffer Overflow Vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. The Linux Kernel suffers from a local buffer overflow vulnerability due to the program failing to adequately perform bounds checking on user input. Allowing an attacker to...

Gnome gnome-session buffer overflow vulnerability

Gnome-session is a session tool for the Gnome 2.x desktop environment. A buffer overflow vulnerability exists in the 'main.c' script of nome gnome-session, which stems from the program's failure to perform proper bounds checking on user-submitted input. An attacker could use this vulnerability to...

libgd 'read_image_tga' heap buffer overflow vulnerability

libgd also known as GD Graphics Library or libgd2 is an American software developer Thomas Boutell developed an open source library for dynamic image creation, which supports the creation of charts, graphs and thumbnails and so on. A heap-based buffer overflow vulnerability exists in libgd, which...

QEMU 'rocker.c' stack buffer overflow vulnerability

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A stack buffer overflow vulnerability exists in QEMU, which stems from the program's failure to perform proper bounds checking on user-submitted input. An attacker coul...

Silicon Graphics LibTiff Heap Buffer Overflow Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF Tagged Image File Format files from the U.S. company Silicon Graphics. The library contains a number of command-line tools to deal with TIFF files. A heap buffer overflow vulnerability exists in Silicon Graphics LibTiff 4.0.6 and...

lldp 'protocols/lldp.c' buffer overflow vulnerability

lldp is a link-layer discovery protocol that allows network devices to advertise their device identity and performance on the local subnet. lldp 'protocols/lldp.c' does not perform proper bounds checking on user-submitted input, allowing an attacker to exploit the vulnerability by submitting a...

IKEView.exe Stack Buffer Overflow Vulnerability

IKEView.exe is a tool for checking Internet private key exchange in firewall packets. IKEView.exe does not perform proper boundary checks on user-submitted inputs, allowing an attacker to exploit the vulnerability to execute arbitrary code or conduct denial-of-service attacks...

FreeXL Excel File Parsing Integer Overflow Vulnerability

FreeXL is an open source library for extracting valid data from Excel .xls spreadsheets developed by software developer Alessandro Furieri. An integer overflow vulnerability exists in FreeXL, which arises from the program failing to perform proper bounds checking on user-submitted input. An...

Acoustica Pianissimo 'id' Buffer Overflow Vulnerability

Pianissimo is the latest virtual piano software from Acoustica. Acoustica Pianissimo 'id' suffers from a buffer overflow vulnerability due to the program failing to adequately bounds check user-supplied input. An attacker could be allowed to exploit the vulnerability to execute arbitrary code...