curl: CVE-2022-35260: .netrc parser out-of-bounds access

Summary: Curl expects the .netrc file to have space characters. So if there is no space character, it will do an out-of-bounds read and a 1-byte out-of-bounds write. This can happen multiple times depending on the state of the memory. Steps To Reproduce: curl --netrc-file .netrc test.local ".netr...

PT-2020-22597

Name of the Vulnerable Software and Affected Versions QPDF affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the QPDFTokenizer class, specifically in the isSpace, presentCharacter, and readToken functions...