Substance 3D Stager Use-After-Free

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Site Isolation Code Execution

The vulnerability of Google Chrome’s Site Isolation component relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created HTML page...

Google Chrome Autonomous Mode Code Execution

The vulnerability of Google Chrome’s autonomous browser mode for Android relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

QEMU Resource Management Error Vulnerability

QEMU is a suite of analog processor software from the French individual developer Fabrice Bellard. The software is fast and cross-platform. QEMU suffers from a memory misreference vulnerability that stems from a confusion in the instructions responsible for freeing memory in the e1000e NIC...

SUSE CVE-2023-26965

loadImage in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image...

Important: kernel-livepatch-6.1.19-30.43

Issue Overview: In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs. CVE-2022-48425 An out-of-bounds memory access flaw was found in the Linux kernel's XFS file system in how a user restores an XFS image after failu...

CVE-2023-29575

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component...

Design/Logic Flaw

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component...

CVE-2023-29575

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component...

CVE-2023-29575

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component...

Design/Logic Flaw

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component...

CVE-2023-29573

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component...

CVE-2023-29573

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component...

CVE-2023-29573

CVE-2023-29573 concerns Bento4 v1.6.0-639 with an out-of-memory bug in the mp4info component. The connected sources confirm the description across multiple feeds (Red Hat, NVD, OSV, etc.). The documents do not provide a remediation or fixed version. Metrics indicate a LOCAL attack vector, LOW att...

CVE-2023-29574

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42avc component...

CVE-2023-29574

CVE-2023-29574 affects Bento4 v1.6.0-639, where the mp42avc component contains an out-of-memory bug. Multiple sources (CNVD/CNNVD/Red Hat and others) describe this as a denial-of-service risk due to memory exhaustion. The CVSS shows a Medium base score (5.5) with LOCAL attack vector, low attack c...

CVE-2023-29574

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42avc component...

PYSEC-2023-56

Wagtail is an open source content management system built on Django. Prior to versions 4.1.4 and 4.2.2, a memory exhaustion bug exists in Wagtail's handling of uploaded images and documents. For both images and documents, files are loaded into memory during upload for additional processing. A use...

imagemagick:rotate_fuzzer: Use-of-uninitialized-value in LibRaw::adjust_bl

Detailed Report: https://oss-fuzz.com/testcase?key=5553288251834368 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: rotatefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::adjustbl LibRaw::raw2imagee...

PT-2023-21558 · Opensips · Opensis

Name of the Vulnerable Software and Affected Versions: OpenSIPS versions prior to 3.1.7 OpenSIPS versions prior to 3.2.4 Description: OpenSIPS is a Session Initiation Protocol SIP server implementation. A specially crafted Authorization header causes OpenSIPS to crash or behave in an unexpected w...