CVE-2021-45944

Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampleddatasample called from sampleddatacontinue and interp...

CVE-2021-45944: Use After Free

Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampleddatasample called from sampleddatacontinue and interp...

OSV-2021-803 Heap-buffer-overflow in sampled_data_finish

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34675 Crash type: Heap-buffer-overflow WRITE 16 Crash state: sampleddatafinish sampleddatacontinue interp...

PT-2021-28281

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow WRITE 16 crash type. The crash state includes functions such as sampled data finish, sampled data continue...

OSV-2021-717 Heap-use-after-free in real_param

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33862 Crash type: Heap-use-after-free READ 1 Crash state: realparam zpdfinkpath interp...

PT-2021-28241

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 1 crash type. The crash state involves real param, zpdfinkpath, and interp. No information is availabl...

PT-2021-28027

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, which is a type of memory corruption bug. This occurs when a program attempts to access memory that ha...

PT-2021-5708

Name of the Vulnerable Software and Affected Versions Ghostscript GhostPDL versions 9.50 through 9.53.3 Description The issue is related to a use-after-free in the sampled data sample function, which can be called from sampled data continue and interp. This can potentially allow an attacker to...

OSV-2020-1886 Use-of-uninitialized-value in gs_scan_token

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21622 Crash type: Use-of-uninitialized-value Crash state: gsscantoken interp gscallinterp...

OSV-2020-1878 Use-of-uninitialized-value in s_A85D_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21616 Crash type: Use-of-uninitialized-value Crash state: sA85Dprocess gsscantoken interp...

OSV-2020-1873 Use-of-uninitialized-value in zcheck_r6_password

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23440 Crash type: Use-of-uninitialized-value Crash state: zcheckr6password interp gscallinterp...

OSV-2020-1869 Use-of-uninitialized-value in gs_scan_token

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21625 Crash type: Use-of-uninitialized-value Crash state: gsscantoken tokenexeccontinue interp...

PT-2020-22020

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a crash type of "Use-of-uninitialized-value" as reported by OSS-Fuzz. The crash state involves functions such as zcheck r6 passwor...

PT-2020-22033

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of "Use-of-uninitialized-value". The crash state includes functions such as gs scan token, interp, and gs call interp...

PT-2020-22015

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of "Use-of-uninitialized-value". The crash state involves functions such as gs scan token, tokenexec continue, and...

PT-2020-22025

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of "Use-of-uninitialized-value". The crash state involves functions such as s A85D process, gs scan token, and interp...

PT-2020-21898

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a global buffer overflow write. The crash occurs in the OT::VarData::get scalars and OT::VariationStore::get...

Tcpdump NFS Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.NFS parser is one of the network file system parsers. A buffer overflo...

PT-2017-12759

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the NFS parser component of tcpdump. This could allow a remote attacker to obtain sensitive information by sending a specially crafted request. The buffe...

UBUNTU-CVE-2015-4504

The lutinverseinterp16 function in the QCMS library in Mozilla Firefox before 41.0 allows remote attackers to obtain sensitive information or cause a denial of service buffer over-read and application crash via crafted attributes in the ICC 4 profile of an image...