Buffer Overflow

u-boot is vulnerable to buffer overflows. The vulnerability exists in nfslookupreply in net/nfs.c in due to an unbounded memcpy with a failed length check, leading to a buffer overflow...

CVE-2022-38227

XPDF commit ffaf11c was discovered to contain a stack overflow via asanmemcpy at asaninterceptorsmemintrinsics.cpp...

CVE-2022-38227

XPDF commit ffaf11c was discovered to contain a stack overflow via asanmemcpy at asaninterceptorsmemintrinsics.cpp...

CVE-2022-38227

XPDF commit ffaf11c was discovered to contain a stack overflow via asanmemcpy at asaninterceptorsmemintrinsics.cpp...

CVE-2022-37781

fdkaac v1.0.3 was discovered to contain a heap buffer overflow via interceptormemcpy.part.46 at /sanitizercommon/sanitizercommoninterceptors.inc...

UBUNTU-CVE-2022-38227

XPDF commit ffaf11c was discovered to contain a stack overflow via asanmemcpy at asaninterceptorsmemintrinsics.cpp...

UBUNTU-CVE-2022-37781

fdkaac v1.0.3 was discovered to contain a heap buffer overflow via interceptormemcpy.part.46 at /sanitizercommon/sanitizercommoninterceptors.inc...

fdkaac 缓冲区错误漏洞

fdkaac is a command-line front-end for the libfdk-aac encoder by the Japanese individual developer nu774. A security vulnerability exists in fdkaac version v1.0.3, which originates from a heap buffer overflow contained in interceptormemcpy.part.46 via...

XPDF 缓冲区错误漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF suffers from a buffer error vulnerability that stems from asanmemcpy containing a stack overflow in asaninterceptorsmemintrinsics.cpp...

The vulnerability of the memcpy() function in the Samba networking communication software package allows a attacker to compromise the confidentiality of protected information or cause service failures.

The vulnerability of the memcpy function in the Samba networking software package is related to errors during the initialization of the count variable. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality of protected information or cause service failures ...

CVE-2022-37416

Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2mcfullxfully8x8...

Design/Logic Flaw

Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2mcfullxfully8x8...

CVE-2022-37416

Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2mcfullxfully8x8...

CVE-2022-37416

CVE-2022-37416 affects Ittiam libmpeg2, where versions prior to 2022-07-27 use memcpy with overlapping memory blocks in the impeg2_mc_fullx_fully_8x8 function. The vulnerability description and multiple advisories (e.g., Red Hat, SUSE, Alpine Linux, PRION, CNNVD) consistently cite this issue as a...

PT-2022-23984 · Ittiam · Ittiam Libmpeg2

Name of the Vulnerable Software and Affected Versions: Ittiam libmpeg2 versions prior to 2022-07-27 Description: The issue is related to the use of memcpy with overlapping memory blocks in the impeg2 mc fullx fully 8x8 function. Recommendations: For versions prior to 2022-07-27, update to a versi...

Ittiam Systems libmpeg2 安全漏洞

Ittiam Systems libmpeg2 is an open source library of MPEG-1 and MPEG-2 video stream decoding functions from Ittiam Systems. A security vulnerability exists in Ittiam Systems libmpeg2 versions prior to 2022-07-27, which stems from the use of memcpy with overlapping memory blocks, and can be...

OSV-2022-585 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49103 Crash type: Memcpy-param-overlap Crash state: repeat pere pere...

EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2022-2028)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Null source pointer passed as an argument to memcpy function within TIFFFetchStripThing in tifdirread.c in libtiff versions from...

CVE-2022-32441

A memory corruption in Hex Rays Ida Pro v6.6 allows attackers to cause a Denial of Service DoS via a crafted file. Related to Data from Faulting Address controls subsequent Write Address starting at msvcrt!memcpy+0x0000000000000056...

CVE-2022-32441

A memory corruption in Hex Rays Ida Pro v6.6 allows attackers to cause a Denial of Service DoS via a crafted file. Related to Data from Faulting Address controls subsequent Write Address starting at msvcrt!memcpy+0x0000000000000056...