Lucene search
+L

1368 matches found

Github Security Blog
Github Security Blog
added 2021/08/25 8:52 p.m.34 views

quinn invalidly assumes the memory layout of std::net::SocketAddr

The quinn crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

7.5CVSS7.3AI score0.0125EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/08/25 8:52 p.m.71 views

GHSA-FHV4-FX3V-77W6 quinn invalidly assumes the memory layout of std::net::SocketAddr

The quinn crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

7.5CVSS7.4AI score0.0125EPSS
SaveExploits0References4
OSV
OSV
added 2021/08/25 8:50 p.m.100 views

GHSA-PF3P-X6QJ-6J7Q mio invalidly assumes the memory layout of std::net::SocketAddr

The mio crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

5.5CVSS5.3AI score0.00389EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2021/08/25 8:50 p.m.35 views

mio invalidly assumes the memory layout of std::net::SocketAddr

The mio crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

5.5CVSS5.5AI score0.00389EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2021/08/23 10:15 p.m.11 views

CVE-2020-18773

An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service DOS via a crafted tif file...

6.5CVSS6.4AI score
SaveExploits0References2
PyPA
PyPA
added 2021/08/23 10:15 p.m.6 views

PYSEC-2021-883

An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service DOS via a crafted tif file...

6.5CVSS6.7AI score0.01332EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/08/23 12:0 a.m.50 views

CVE-2020-18773

An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service DOS via a crafted tif file...

6.3AI score0.01332EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/08/23 12:0 a.m.11 views

Exiv2 缓冲区错误漏洞

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. An invalid memory access vulnerability exists in the decode function in iptc.cpp in Exiv2 version 0.27.99.0. An attacker could exploit the vulnerability to cause a denial of service via a specially crafted t...

6.5CVSS5.7AI score0.01332EPSS
SaveExploits1References1
OSV
OSV
added 2021/07/21 6:15 p.m.22 views

CVE-2020-19491

There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

7.8CVSS7.3AI score
SaveExploits0References2
NVD
NVD
added 2021/07/21 6:15 p.m.23 views

CVE-2020-19491

There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

7.8CVSS0.00995EPSS
SaveExploits1References2
OSV
OSV
added 2021/07/21 6:15 p.m.18 views

CVE-2020-19499

An issue was discovered in heif::Boxiref::getreferences in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impact due to an invalid memory read...

8.8CVSS7.1AI score
SaveExploits0References2
OSV
OSV
added 2021/07/21 6:15 p.m.5 views

DEBIAN-CVE-2020-19481

An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...

5.5CVSS6.6AI score0.01019EPSS
SaveExploits1References1
Prion
Prion
added 2021/07/21 6:15 p.m.13 views

Design/Logic Flaw

An issue was discovered in heif::Boxiref::getreferences in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impact due to an invalid memory read...

6.8CVSS8.8AI score0.01368EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2021/07/21 6:15 p.m.8 views

UBUNTU-CVE-2020-19491

There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

7.8CVSS5.8AI score0.00995EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2021/07/21 5:21 p.m.32 views

CVE-2020-19499

An issue was discovered in heif::Boxiref::getreferences in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impact due to an invalid memory read...

8.9AI score0.01368EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/07/21 5:17 p.m.30 views

CVE-2020-19491

There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

7.8AI score0.00995EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/07/21 12:0 a.m.7 views

libheif 缓冲区错误漏洞

libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder. libheif version 1.4.0 contains a denial-of-service vulnerability in heif::Boxiref::getreferences. The vulnerability stems from an invalid memory read. An attacker could exploit this vulnerability to cause a denial of servic...

8.8CVSS5.7AI score0.01368EPSS
SaveExploits1References3
NVD
NVD
added 2021/07/07 2:15 p.m.34 views

CVE-2020-20215

Mikrotik RouterOs 6.44.6 long-term tree suffers from a memory corruption vulnerability in the /nova/bin/diskd process. An authenticated remote attacker can cause a Denial of Service due to invalid memory access...

6.5CVSS0.01547EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/07/07 1:29 p.m.31 views

CVE-2020-20215

Mikrotik RouterOs 6.44.6 long-term tree suffers from a memory corruption vulnerability in the /nova/bin/diskd process. An authenticated remote attacker can cause a Denial of Service due to invalid memory access...

6.5AI score0.01547EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/06/29 12:0 a.m.7 views

BinDiff 资源管理错误漏洞

BinDiff is a tool for binary file analysis and comparison. A security vulnerability exists in BinDiff that can be exploited by an attacker to create a specific IdaPro .i64 file will cause the BinDiff plugin to load an invalid memory offset. The vulnerability can be exploited by an attacker to tak...

7.8CVSS6.1AI score0.00207EPSS
SaveExploits0References1
Rows per page
Query Builder