140 matches found
Spin buffer error vulnerability
Spin is an open source software verification tool . It is used for explicit state logic model checking. A security vulnerability exists in Spin that stems from an out-of-bounds write found to be included in spinlex.c's lex...
PT-2022-12600
Name of the Vulnerable Software and Affected Versions Spin version 6.5.1 Description The issue is related to an out-of-bounds write in the lex function at spinlex.c. Recommendations For Spin version 6.5.1, at the moment, there is no information about a newer version that contains a fix for this...
Lex Li vscode-restructuredtext access control error vulnerability
Lex Li vscode-restructuredtext is a Lex Li open source application. This extension provides rich reStructuredText language support for Visual Studio Code.An access control error vulnerability exists in versions prior to Lex Li vscode-restructuredtext 146.0.0, which stems from the inclusion of an...
PT-2021-27568
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves functions such as pdf lex, pdf process stream, and pdf proce...
PT-2021-27574
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the pdf lex, pdf load cmap, and pdf load embedded cmap...
PT-2021-27612
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value". The crash state involves functions such as lex white, pdf lex, and pdf process...
PT-2020-21966
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type known as Memcpy-param-overlap. The crash state involves several functions: zend lex tstring, zendparse, and zend...
ALPINE-CVE-2020-24240
GNU Bison before 3.7.1 has a use-after-free in obstackfree in lib/obstack.c called from gramlex when a '\0' byte is encountered. NOTE: there is a risk only if Bison is used with untrusted input, and the observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug...
OSV-2020-734 Heap-buffer-overflow in Sass::Prelexer::quoted_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Heap-buffer-overflow READ 1 Crash state: Sass::Prelexer::quotedstring char const Sass::Parser::lex& Sass::Parser::parsevalueschema...
OSV-2020-685 Global-buffer-overflow in backup
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18464 Crash type: Global-buffer-overflow READ 1 Crash state: backup peek lexconfig...
PT-2020-22477
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a global buffer overflow read, as indicated by an OSS-Fuzz report. The crash state involves several functions: backup, peek, and le...
PT-2020-22257
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a global buffer overflow read, which occurs in the lex multiline string, lex next, and parse key value functions. No information i...
PT-2020-22263
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to an index-out-of-bounds crash. Technical details about the crash include the functions yara yyparse and yr lex parse rules string, a...
PT-2020-22306
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a global buffer overflow read, which occurs in the lex multiline string, lex next, and parse config functions. No information is...
PT-2020-22508
Name of the Vulnerable Software and Affected Versions Sass affected versions not specified Description The issue is related to a heap-buffer-overflow read, which occurs in the Sass::Prelexer::quoted string function. This function is called by Sass::Parser::lex and Sass::Parser::parse value schema...
PT-2020-22460
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a global buffer overflow read, as indicated by an OSS-Fuzz report. The crash state involves several functions: backup, lex string,...
OSV-2020-279 Global-buffer-overflow in lex_multiline_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18562 Crash type: Global-buffer-overflow READ 3 Crash state: lexmultilinestring lexnext parsekeyvalue...
PT-2020-22224
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a global buffer overflow read, specifically a crash type identified as Global-buffer-overflow READ 3. The crash state involves...
lex-connect.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1065879 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting lex-connect.net website an...
