CVE-2024-47615 GHSL-2024-117: GStreamer has an out-of-bounds write in Ogg demuxer

GStreamer is a library for constructing graphs of media-handling components. An OOB-Write has been detected in the function gstparsevorbissetuppacket within vorbisparse.c. The integer size is read from the input file without proper validation. As a result, size can exceed the fixed size of the...

CVE-2021-45685

CVE-2021-45685 affects the Rust columnar crate (pre-2021-01-07) where ColumnarReadExt::read_typed_vec may read from uninitialized memory. This can cause memory exposure and undefined behavior when a crate passes an uninitialized buffer to a user-provided Read implementation. Multiple connected ad...