Ubuntu 16.04 ESM / 18.04 LTS : AdvanceCOMP vulnerabilities (USN-5671-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5671-1 advisory. It was discovered that AdvanceCOMP did not properly manage memory of function beuint32read under certain circumstances. If a user were tricke...

CVE-2020-27798

An invalid memory address reference was discovered in the adjABS function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27798

An invalid memory address reference was discovered in the adjABS function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27797

An invalid memory address reference was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27798

An invalid memory address reference was discovered in the adjABS function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27797

UPX 4.0.0 is affected by CVE-2020-27797 due to an invalid memory address reference in the elf_lookup function (p_lx_elf.cpp) triggered by a crafted Mach-O file. The vulnerability is exploitable locally and can impact availability. The provided documents confirm the affected component and root cau...

CVE-2020-27787

A Segmentaation fault was found in UPX in invertptdynamic function in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

GPAC Buffer Overflow Vulnerability (CNVD-2022-06469)

GPAC is an open source multimedia framework. GPAC has a security vulnerability that stems from the discovery, via the function shiftchunkoffsets.isra, that GPAC v1.1.0 contains an invalid memory address dereference. No detailed vulnerability details are currently available...

DEBIAN-CVE-2021-45767

GPAC 1.1.0 was discovered to contain an invalid memory address dereference via the function lsrreadid. This vulnerability can lead to a Denial of Service DoS...

DEBIAN-CVE-2021-45764

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shiftchunkoffsets.isra...

CVE-2021-45764

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shiftchunkoffsets.isra...

Design/Logic Flaw

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shiftchunkoffsets.isra...

CVE-2021-45762

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gfsgvrmlmfreset. This vulnerability allows attackers to cause a Denial of Service DoS...

CVE-2021-45762

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gfsgvrmlmfreset. This vulnerability allows attackers to cause a Denial of Service DoS...

CVE-2021-45761

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find function...

CVE-2021-45761

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find function...

CVE-2021-45761

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find function...

Design/Logic Flaw

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gfsgvrmlmfreset. This vulnerability allows attackers to cause a Denial of Service DoS...

CVE-2021-45761

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find function...

CVE-2021-45761

CVE-2021-45761 concerns the ROPium v3.1 library, where an invalid memory address dereference in the find() function is reported. The vulnerability’s root cause is a memory access issue in an internal routine, with CVSS-3.1 indicating a HIGH impact on availability and network attack vector, and no...