Lucene search
+L

230 matches found

OSV
OSV
•added 2022/01/01 7:15 p.m.•11 views

ALPINE-CVE-2021-45960

In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...

8.8CVSS6.9AI score0.04234EPSS
SaveExploits1References1
OSV
OSV
•added 2022/01/01 7:15 p.m.•8 views

DEBIAN-CVE-2021-45960

In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...

8.8CVSS7.3AI score0.04234EPSS
SaveExploits1References1
OSV
OSV
•added 2022/01/01 7:15 p.m.•17 views

AZL-7124 CVE-2021-45960 affecting package expat for versions less than 2.4.3-1

In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...

8.8CVSS6.9AI score0.04234EPSS
SaveExploits1References1
OSV
OSV
•added 2022/01/01 7:15 p.m.•13 views

UBUNTU-CVE-2021-45960

In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...

8.8CVSS6.9AI score0.04234EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/01/01 6:47 p.m.•76 views

CVE-2021-45960

In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...

9.4AI score0.04234EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2021/12/30 12:00 a.m.•17 views

PT-2021-6138

Name of the Vulnerable Software and Affected Versions Expat aka libexpat versions prior to 2.4.3 Description The issue is related to a left shift by 29 or more places in the storeAtts function in xmlparse.c, which can lead to realloc misbehavior, such as allocating too few bytes or only freeing...

9.8CVSS7.3AI score0.04234EPSS
SaveExploits1References211
OSV
OSV
•added 2021/08/28 11:04 a.m.•12 views

OESA-2021-1327 leptonica security update

The library supports many operations that are useful on Document images Natural images Fundamental image processing and image analysis operations Rasterop aka bitblt Affine transforms scaling, translation, rotation, shear on images of arbitrary pixel depth Projective and bi-linear transforms Bina...

7.5CVSS7.1AI score0.02871EPSS
SaveExploits5References6
attackerkb
attackerkb
•added 2021/06/25 3:15 p.m.•10 views

CVE-2021-34185

Miniaudio 0.10.35 has an integer-based buffer overflow caused by an out-of-bounds left shift in drwavbytestou32 in miniaudio.h...

7.8CVSS7.3AI score0.00682EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/06/25 12:00 a.m.•11 views

Miniaudio 安全漏洞

Miniaudio is a single-file audio playback and capture library written in C. A buffer overflow vulnerability exists in Miniaudio version 0.10.35. The vulnerability stems from an out-of-bounds left shift of drwavbytestou32 in miniaudio.h. No detailed vulnerability details are currently available."...

7.8CVSS5.9AI score0.00682EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/25 12:00 a.m.•4 views

CVE-2021-34185: Buffer Copy without Checking Size of Input

Miniaudio 0.10.35 has an integer-based buffer overflow caused by an out-of-bounds left shift in drwavbytestou32 in miniaudio.h...

7.8CVSS6AI score0.00682EPSS
SaveExploits1References2
OSV
OSV
•added 2021/05/31 3:39 p.m.•14 views

UVI-2021-1000470 liquidio: Fix unintented sign extension of a left shift of a u16

liquidio: Fix unintented sign extension of a left shift of a u16 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.233 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2021/05/31 3:39 p.m.•21 views

UVI-2021-1000426 liquidio: Fix unintented sign extension of a left shift of a u16

liquidio: Fix unintented sign extension of a left shift of a u16 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2021/05/31 3:39 p.m.•19 views

UVI-2021-1000454 liquidio: Fix unintented sign extension of a left shift of a u16

liquidio: Fix unintented sign extension of a left shift of a u16 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.191 by commit...

7.2AI score
SaveExploits0
NVD
NVD
•added 2021/03/11 9:15 p.m.•21 views

CVE-2020-36277

Leptonica before 1.80.0 allows a denial of service application crash via an incorrect left shift in pixConvert2To8 in pixconv.c...

7.5CVSS0.02433EPSS
SaveExploits1References7
OSV
OSV
•added 2021/03/11 9:15 p.m.•4 views

DEBIAN-CVE-2020-36277

Leptonica before 1.80.0 allows a denial of service application crash via an incorrect left shift in pixConvert2To8 in pixconv.c...

7.5CVSS7.2AI score0.02433EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/11 12:00 a.m.•2 views

CVE-2020-36277: Always-Incorrect Control Flow Implementation

Leptonica before 1.80.0 allows a denial of service application crash via an incorrect left shift in pixConvert2To8 in pixconv.c...

7.5CVSS5.7AI score0.02433EPSS
SaveExploits1References2
CNVD
CNVD
•added 2020/07/15 12:00 a.m.•3 views

Bitcoin wxBitcoin/bitcoind Denial of Service Vulnerability

A vulnerability exists in Bitcoin wxBitcoin and bitcoind versions prior to 0.3.5. A remote attacker could use this vulnerability to cause a denial of service daemon crash via a Bitcoin transaction containing the OPLSHIFT script opcode...

6.8AI score
SaveExploits0References1
Debian
Debian
•added 2020/01/29 9:52 p.m.•130 views

[SECURITY] [DLA 2085-1] zlib security update

Package : zlib Version : 1:1.2.8.dfsg-2+deb8u1 CVE ID : CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843 Several issues have been found in zlib, a compression library. They are basically about improper big-endian CRC calculation, improper left shift of negative integers and improper pointe...

9.8CVSS10AI score0.0755EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2019/04/25 12:00 a.m.•11 views

The vulnerability of the opj_j2k_setup_encoder function in the OpenJPEG image encoding and decoding library, related to integer overflow caused by left shift operations, allows attackers to cause service failures.

The vulnerability of the opjj2ksetupencoder function in the OpenJPEG image encoding and decoding library is related to a numerical overflow caused by a left shift operation. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created BMP file...

6.5CVSS6.5AI score0.02331EPSS
SaveExploits1References6Affected Software3
OSV
OSV
•added 2019/02/25 4:29 a.m.•14 views

CVE-2018-20788

drivers/leds/leds-aw2023.c in the led driver for custom Linux kernels on the Xiaomi Redmi 6pro daisy-o-oss phone has several integer overflows because of a left-shifting operation when the right-hand operand can be equal to or greater than the integer length. This can be exploited by a crafted...

5.5CVSS5.8AI score0.00795EPSS
SaveExploits0References1
Rows per page
Query Builder