CVE-2020-35981

Removed by vendor...

CVE-2020-35981

CVE-2020-35981 affects GPAC versions 0.8.0 and 1.0.1, with an invalid pointer dereference in isomedia/isom_store.c SetupWriters(). The connected sources confirm the root cause and affected component, but do not provide exploitation details or practical workflow. Impact is described across referen...

CVE-2020-35982

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gfhintertrackfinalize in mediatools/isomhinter.c...

CVE-2020-35982

Removed by vendor...

PT-2021-11892

Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 1.0.1 Description: An issue was discovered in the function SetupWriters in isomedia/isom store.c, which leads to an invalid pointer dereference. Recommendations: For GPAC version 0.8.0, there is no information abou...

PT-2021-11893

Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 1.0.1 Description: An issue was discovered in the function gf hinter track finalize in media tools/isom hinter.c, which contains an invalid pointer dereference. Recommendations: For GPAC version 0.8.0, consider...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An invalid pointer dereference vulnerability exists in the SetupWriters function in isomedia/isomstore.c in GPAC versions 0.8.0 and 1.0.1. No detailed vulnerability details are provided at this time...

openSUSE: Security Advisory for openldap2 (openSUSE-SU-2021:0408-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

EulerOS Virtualization 2.9.1 : openldap (EulerOS-SA-2021-1719)

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateChec...

EulerOS Virtualization 2.9.0 : openldap (EulerOS-SA-2021-1753)

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateChec...

Huawei EulerOS: Security Advisory for openldap (EulerOS-SA-2021-1719)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-11220

CVE-2020-11220 is a TOCTOU-type issue in processing storage SCM commands where a pointer could be invalid during a specific window in Qualcomm closed-source components used in Snapdragon Auto/Compute/Connectivity/Industrial IOT/Mobile/Wired platforms. The connected documentation confirms the vuln...

PT-2021-9236

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description The issue arises during the processing of storage SCM commands, where a time of check or time of use window exists, potentially leading to the use of an invalid pointer at a...

CVE-2020-11220: Time-of-check Time-of-use (TOCTOU) Race Condition

While processing storage SCM commands there is a time of check or time of use window where a pointer used could be invalid at a specific time while executing the storage SCM call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile,...

Trojan-Dropper.Win32.Delf.xk Denial Of Service

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/869c813722be90cf1b3708051103ce14.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Dropper.Win32.Delf.xk Vulnerability: Remote Invalid Pointer Write DOS Description:...

OPENSUSE-SU-2021:0408-1 Security update for openldap2

This update for openldap2 fixes the following issues: - bsc1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service. - bsc1182411 CVE-2020-36229 - ldapX509dn2bv crash in the X.509 DN parsing in adkeystring, resulting...

SUSE SLED15 / SLES15 Security Update : openldap2 (SUSE-SU-2021:0723-1)

This update for openldap2 fixes the following issues : bsc1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service. bsc1182411 CVE-2020-36229 - ldapX509dn2bv crash in the X.509 DN parsing in adkeystring, resulting in...

SUSE-SU-2021:0693-1 Security update for openldap2

This update for openldap2 fixes the following issues: - bsc1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service. - bsc1182411 CVE-2020-36229 - ldapX509dn2bv crash in the X.509 DN parsing in adkeystring, resulting...

Qualcomm 封闭源组件安全漏洞

A security vulnerability exists in the Qualcomm closed source component that stems from a check time or use time window when processing a store SCM command, where a pointer used may be invalid at a specific time when executing a store SCM call...

CVE-2021-23975

The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes. When this function was invoked we incorrectly called the sizeof function, instead of using the API method that checks for invalid pointers. This vulnerability affects...