Lucene search
+L

2172 matches found

Positive Technologies
Positive Technologies
•added 2023/03/22 12:00 a.m.•21 views

PT-2023-21322 · Vox2Mesh · Vox2Mesh

Name of the Vulnerable Software and Affected Versions: vox2mesh version 1.0 Description: The issue is caused by a stack-overflow in the main.cpp file due to the incorrect use of the memcpy function. This allows an attacker to cause a denial of service abort via a crafted file. Recommendations: Fo...

5.5CVSS5.3AI score0.00333EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/03/22 12:00 a.m.•9 views

syoyo tinydng 安全漏洞

syoyo tinydng is a loader and writer library by the individual developer Syoyo Fujita. A security vulnerability exists in syoyo tinydng, which stems from a problem with the function interceptormemcpy in the file tinydngloader.h, which can lead to a heap-based buffer overflow...

5.5CVSS5.3AI score0.00389EPSS
SaveExploits1References6
CVE
CVE
•added 2023/03/22 12:00 a.m.•61 views

CVE-2023-27754

CVE-2023-27754 affects vox2mesh 1.0. The vulnerability is a stack overflow in the program’s main.cpp caused by incorrect use of memcpy(), leading to denial of service via a crafted file. A PoC is available in the CVE context. Practically, this is a local attack with a high impact on availability ...

5.5CVSS5.3AI score0.00333EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/03/22 12:00 a.m.•8 views

CVE-2023-27754

vox2mesh 1.0 has stack-overflow in main.cpp, this is stack-overflow caused by incorrect use of memcpy funciton. The flow allows an attacker to cause a denial of service abort via a crafted file...

5.3AI score0.00333EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/03/22 12:00 a.m.•11 views

PT-2023-17086 · Unknown · Syoyo Tinydng

Name of the Vulnerable Software and Affected Versions: syoyo tinydng affected versions not specified Description: A problematic issue has been found, affecting the interceptor memcpy function of the file tiny dng loader.h. This leads to a heap-based buffer overflow. Local access is required for a...

5.5CVSS7.4AI score0.00389EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/22 12:00 a.m.•1 views

CVE-2023-27754: Out-of-bounds Write

vox2mesh 1.0 has stack-overflow in main.cpp, this is stack-overflow caused by incorrect use of memcpy funciton. The flow allows an attacker to cause a denial of service abort via a crafted file...

5.5CVSS5.8AI score0.00333EPSS
SaveExploits1References3
Redos
Redos
•added 2023/03/22 12:00 a.m.•31 views

ROS-20230322-01

A vulnerability in the HEIF and AVIF libheif file format decoder is related to the data parsing code of strided images in the emscripten wrapper for libheif. Exploitation of the vulnerability could allow an attacker acting remotely to use a specially crafted image file to cause a buffer overflow ...

7.8CVSS7.7AI score0.00307EPSS
SaveExploits0
Cvelist
Cvelist
•added 2023/03/22 12:00 a.m.•56 views

CVE-2023-27754

vox2mesh 1.0 has stack-overflow in main.cpp, this is stack-overflow caused by incorrect use of memcpy funciton. The flow allows an attacker to cause a denial of service abort via a crafted file...

5.5AI score0.00333EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2023/03/08 12:00 a.m.•26 views

Debian: Security Advisory (DLA-48-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.6CVSS6.9AI score0.31671EPSS
SaveExploits1References2
NVD
NVD
•added 2023/02/24 4:15 a.m.•21 views

CVE-2023-0996

There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call...

7.8CVSS7.7AI score0.00307EPSS
SaveExploits0References2
Prion
Prion
•added 2023/02/24 4:15 a.m.•25 views

Buffer overflow

There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call...

4.4CVSS7.7AI score0.00307EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/02/24 4:15 a.m.•11 views

UBUNTU-CVE-2023-0996

There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call...

7.8CVSS7.6AI score0.00307EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2023/02/24 3:35 a.m.•11 views

CVE-2023-0996

There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call...

7.7AI score0.00307EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/02/24 3:35 a.m.•52 views

CVE-2023-0996

There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call...

7.9AI score0.00307EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/24 12:00 a.m.•0 views

CVE-2023-0996: Buffer Copy without Checking Size of Input

There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call...

7.8CVSS6.1AI score0.00307EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/02/24 12:00 a.m.•25 views

libheif 安全漏洞

libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder. A security vulnerability exists in libheif. An attacker exploited the vulnerability to cause a buffer overflow during a memcpy call via a specially crafted image file...

7.8CVSS8AI score0.00307EPSS
SaveExploits0References3
F5 Networks
F5 Networks
•added 2023/02/21 6:54 p.m.•46 views

K88628547: glibc vulnerability CVE-2019-6488

Security Advisory Description The string component in the GNU C Library aka glibc or libc6 through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-bit register for sizet in assembly codes, which can lead to a segmentation fault or possibly unspecified other impact, as...

7.8CVSS7.9AI score0.00436EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:46 p.m.•68 views

K40977030: glibc vulnerability CVE-2020-6096

Security Advisory Description An exploitable signed comparison vulnerability exists in the ARMv7 memcpy implementation of GNU glibc 2.30.9000. Calling memcpy on ARMv7 targets that utilize the GNU glibc implementation with a negative value for the 'num' parameter results in a signed comparison...

8.1CVSS8.3AI score0.05354EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/02/21 12:00 a.m.•15 views

PT-2025-38038

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mpi3mr get all tgt info function contains several issues. The function incorrectly calculates the valid entry length in alltgt info by assuming an incorrect size for the header of th...

7.8CVSS7.2AI score0.00151EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/02/15 6:21 a.m.•9 views

SUSE CVE-2003-0967

raddecode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service crash via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute...

5CVSS6.8AI score0.04638EPSS
SaveExploits1References4
Rows per page
Query Builder