CVE-2021-41794: Buffer Copy without Checking Size of Input

ogsfqdnparse in Open5GS 1.0.0 through 2.3.3 inappropriately trusts a client-supplied length value, leading to a buffer overflow. The attacker can send a PFCP Session Establishment Request with "internet" as the PDI Network Instance. The first character is interpreted as a length value to be used ...

libvips:mosaic_fuzzer: Memcpy-param-overlap in vips_foreign_load_jxl_header

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5889145076056064 Project: libvips Fuzzing Engine: honggfuzz Fuzz Target: mosaicfuzzer Job Type: honggfuzzasanlibvips Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

The vulnerability of the `dnn_execute_layer_pad` function in the `libavfilter/dnn/dnn_backend_native_layer_pad.c` file of the FFmpeg multimedia library, related to buffer overflow in memory, allows an attacker to access confidential data, compromise its integrity, and cause a service failure.

The vulnerability of the dnnexecutelayerpad function in the libavfilter/dnn/dnnbackendnativelayerpad.c file of the FFmpeg multimedia library is related to buffer overflows in memory due to insufficient size checking during the memcpy operation. Exploiting this vulnerability can allow an attacker ...

CVE-2021-25456

OOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute memcpy at arbitrary address via forged wmf file...

CVE-2021-25456

OOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute memcpy at arbitrary address via forged wmf file...

CVE-2021-25456

OOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute memcpy at arbitrary address via forged wmf file...

Code injection

OOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute memcpy at arbitrary address via forged wmf file...

CVE-2021-25456

OOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute memcpy at arbitrary address via forged wmf file...

CVE-2021-25456

CVE-2021-25456 affects the libswmfextractor.so component. The vulnerability is described as an out-of-bounds read that enables an attacker to cause a memcpy at an arbitrary address via a forged WMF file, implying memory corruption with possible in-memory impact. According to the sources, this is ...

PT-2021-16646

Name of the Vulnerable Software and Affected Versions: libswmfextractor.so library prior to SMR Sep-2021 Release 1 Description: The issue is related to an out-of-bounds OOB read vulnerability in the libswmfextractor.so library. This vulnerability allows attackers to execute memcpy at an arbitrary...

CVE-2021-25456: Out-of-bounds Read

OOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute memcpy at arbitrary address via forged wmf file...

CVE-2021-21813

Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to memcpy copying the path provided by the user into a staticly sized buffer without any length checks resulting in a stack-buffer overflo...

CVE-2021-21813

Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to memcpy copying the path provided by the user into a staticly sized buffer without any length checks resulting in a stack-buffer overflo...

CVE-2021-21813: Out-of-bounds Write

Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to memcpy copying the path provided by the user into a staticly sized buffer without any length checks resulting in a stack-buffer overflo...

CVE-2021-31292

A flaw was found in exiv2. A integer wraparound in the CrwMap:encode0x1810 function leads to memcpy call with a very large size allowing an attacker, who can provide a malicious image, to crash an application which uses the exiv2 library. The highest threat from this vulnerability is to service...

Arbitrary Code Execution

hdf5 is vulnerable to arbitrary code execution. A memcpy parameter overlap in the function H5Olinkdecode in H5Olink.c allows an attacker to execute arbitrary code on the host OS...

Debian DLA-2716-1 : pillow - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2716 advisory. - In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer...

PT-2021-21415 · Hdf5 +1 · Hdf5 +1

Name of the Vulnerable Software and Affected Versions: matio aka MAT File I/O Library versions 1.5.20 through 1.5.21 Description: The issue is related to a heap-based buffer overflow in the H5MM memcpy function, which is called from H5MM malloc and H5C load entry. This overflow is associated with...

PT-2024-11291

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is an out-of-bounds bug in the ngene command config free buf function. The problem arises because the original code attempts to copy 6 bytes of data into a one-byte size member...

EulerOS 2.0 SP5 : python-pillow (EulerOS-SA-2021-2227)

According to the version of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size.CVE-2021-25290 Note...