python-pillow: Excessive looping in BLP image reader

A flaw was found in python-pillow. BlpImagePlugin did not properly check that reads after jumping to file offsets returned data. This could lead to a denial-of-service where the decoder could be run a large number of times on empty data...

openjpeg: heap-buffer-overflow write in opj_tcd_dc_level_shift_encode()

A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

CODESYS 缓冲区错误漏洞

CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A security vulnerability exists in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT versions prior to V2.4.7.56, which stems from a request with an invalid offset in the affected software that could result in...

Huawei EulerOS: Security Advisory for openjpeg (EulerOS-SA-2021-2601)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-38451

The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those function codes, the user must supply parameters. There is no sanitation on the value of the offset, which allows the client to specify any offset and read out-of-bounds data...

CVE-2021-38451

The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those function codes, the user must supply parameters. There is no sanitation on the value of the offset, which allows the client to specify any offset and read out-of-bounds data...

CVE-2021-38451: Out-of-bounds Read

The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those function codes, the user must supply parameters. There is no sanitation on the value of the offset, which allows the client to specify any offset and read out-of-bounds data...

PT-2021-22129

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue concerns a proprietary protocol named CSC, which allows for calling numerous function codes by supplying parameters. There is no sanitation on t...

AUVESY Versiondog Out-of-Bounds Reading Vulnerability

An out-of-bounds read vulnerability exists in AUVESY Versiondog, an automated production data and change management software solution from AUVESY Germany, which can be exploited by attackers to specify any offset and read out-of-bounds data...

Design/Logic Flaw

Possible out of bound access due to lack of validation of page offset before page is inserted in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30305

Possible out of bound access due to lack of validation of page offset before page is inserted in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30305

CVE-2021-30305 is a local access vulnerability in Qualcomm/Snapdragon graphics stack caused by missing validation of page offsets before a page is inserted, leading to possible out-of-bounds access in Snapdragon Auto, Connectivity, Industrial IoT, and Mobile subsystems. Public metadata from NVD i...

CVE-2021-30305: Improper Input Validation

Possible out of bound access due to lack of validation of page offset before page is inserted in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

PT-2021-18707

Name of the Vulnerable Software and Affected Versions Snapdragon Auto affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected versions not specified Description The issue is relate...

CVE-2021-3888

libmobi is vulnerable to Use of Out-of-range Pointer Offset...

CVE-2021-3888

libmobi is vulnerable to Use of Out-of-range Pointer Offset...

CVE-2021-3889

libmobi is vulnerable to Use of Out-of-range Pointer Offset...

Null pointer dereference

libmobi is vulnerable to Use of Out-of-range Pointer Offset...

CVE-2021-3889

libmobi is vulnerable to Use of Out-of-range Pointer Offset...

CVE-2021-3888

libmobi is vulnerable to Use of Out-of-range Pointer Offset...