PT-2021-7593 · Unknown +1 · Cgal Libcgal +1

Name of the Vulnerable Software and Affected Versions: CGAL libcgal version 5.1.1 Description: The issue is related to multiple code execution vulnerabilities in the Nef polygon-parsing functionality. A specially crafted malformed file can lead to an out-of-bounds read and type confusion,...

Arbitrary Code Execution

jasper is vulnerable to arbitrary code execution. An out-of-bounds write vulnerability in the jpc encoder allows an attacker to execute arbitrary code on the host OS via a malicious input...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. The vulnerability exists in opjt2encodepacket function of t2.c due to an out-of-bounds read which allows an attacker to crash the application via malicious input...

Kozea CairoSVG Resource Management Error Vulnerability

Kozea CairoSVG is a Python based program from the Kozea community that converts SVG files to PDF, EPS, PS and PNG files. A resource management error vulnerability exists in versions of CairoSVG prior to 2.5.1, which can be exploited by an attacker to deliver a malicious SVG and cause the program ...

Debian: Security Advisory (DLA-2503-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-29651

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

CVE-2020-29651

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

CVE-2020-29651

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

Input validation

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

CVE-2020-29651

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

CVE-2020-29651

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

CVE-2020-16160

GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMFDecompress. Parsing malicious input can result in a crash...

CVE-2020-16158

GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMFExpandComplexTYPE. Parsing malicious input can result in a crash or potentially arbitrary code execution...

CVE-2020-16161

GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMFScaledData. Parsing malicious input can result in a crash...

CVE-2020-16160

GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMFDecompress. Parsing malicious input can result in a crash...

CVE-2020-16158

GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMFExpandComplexTYPE. Parsing malicious input can result in a crash or potentially arbitrary code execution...

CVE-2020-16159

GoPro gpmf-parser 1.5 has a heap out-of-bounds read and segfault in GPMFScaledData. Parsing malicious input can result in a crash or information disclosure...

Stack overflow

GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMFExpandComplexTYPE. Parsing malicious input can result in a crash or potentially arbitrary code execution...

CVE-2020-16161

GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMFScaledData. Parsing malicious input can result in a crash...

CVE-2020-16160

CVE-2020-16160 affects GoPro gpmf-parser 1.5. The root cause is a division-by-zero in the function GPMF_Decompress() when parsing input, which can lead to a crash. The vulnerability’s impact as per the data indicates availability disruption (CVSS3.1 base score 7.5, HIGH) but no exploitation detai...