PT-2022-12521 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A Pointer Dereference issue exists via the finplace shift moov meta offsets function, which causes a Denial of Service. Recommendations: For GPAC version 1.0.1, consider disabling the finplace shift moov meta...

SUSE: Security Advisory (SUSE-SU-2021:4063-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2021:4063-1 Security update for icu.691

This update for icu.691 fixes the following issues: - Renamed package from icu 69.1 for SUSE:SLE-15-SP3:Update. jscSLE-17893 - Fix undefined behaviour in 'ComplexUnitsConverter::applyRounder' - Update to release 69.1 - For Norwegian, 'no' is back to being the canonical code, with 'nb' treated as...

Security update for icu.691 (important)

openSUSE Security Update: Security update for icu.691 Announcement ID: openSUSE-SU-2021:4063-1 Rating: important References: 1158955 1159131 1161007 1162882 1167603 1182252 1182645 SLE-17893 Affected Products: openSUSE Leap 15.3 An update that contains security fixes and contains one feature can...

Exploit for Use After Free in Microsoft

CVE-2021-40449 More info here: https://kristal-g.github.io/20...

CVE-2021-34595

A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite...

Libmobi 缓冲区错误漏洞

Libmobi is a C library . Used to handle Mobipocket/Kindle MOBI e-book format documents. An out-of-bounds read vulnerability exists in Libmobi, which stems from the program being vulnerable to the use of out-of-range pointer offsets, and can be exploited by an attacker to read memory information...

Libmobi 缓冲区错误漏洞

Libmobi is a C library . Used to handle Mobipocket/Kindle MOBI e-book format documents. A buffer overflow vulnerability exists in Libmobi, which stems from the fact that libmobi is susceptible to out-of-range pointer offsets, which can be exploited by an attacker to read memory information beyond...

OESA-2021-1392 sane-backends security update

SANE Scanner Access Now Easy is a sane and simple interface to both local and networked scanners and other image acquisition devices like digital still and video cameras. Security Fixes: An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

Usage Make sure Python and ncat are installed...

多款 Qualcomm 产品输入验证错误漏洞

The Qualcomm QCA6574AU is a central processing unit CPU product from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Linux Graphics that stems from a failure to validate page offsets before inserting a page, which could lead to out-of-bounds access. The...

Samba < 3.4.0 Remote Code Execution Vulnerability (CVE-2012-0870)

Ensure AndX offsets are increasing strictly monotonically in pre-3.4 versions. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program ...

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-2209)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the ImfTileOffsets.cpp library in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from reading data beyond the allowable buffer size. This allows attackers to cause system failures.

The vulnerability of the ImfTileOffsets.cpp library in software for storing images with wide dynamic range brightness in OpenEXR is related to the operation being performed within acceptable buffer data limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Contiki-NG 缓冲区错误漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT devices. A buffer overflow vulnerability exists in Contiki-NG versions prior to 4.6. The vulnerability stems from unverified TCP data offsets. An attacker could exploit this vulnerability to cause a denial of...

PYSEC-2021-94

An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads after jumping to file offsets returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data...

UBUNTU-CVE-2021-28678

An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads after jumping to file offsets returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data...

CVE-2020-27738

A vulnerability has been identified in APOGEE PXC Compact BACnet All versions V3.5.5, APOGEE PXC Compact P2 Ethernet All versions V2.8.20, APOGEE PXC Modular BACnet All versions V3.5.5, APOGEE PXC Modular P2 Ethernet All versions V2.8.20, Nucleus NET All versions, Nucleus ReadyStart V3 All versio...

Electric Coin Zcash Security Breach

Zcash is a decentralized open source data currency.Zcashd is the daemon for Zcash. A security vulnerability exists in Electric Coin Zcashd before 2.1.1-1, which stems from a time offset between messages that can be used to obtain sensitive information about the relationship between a victim's...

openSUSE Security Update : viewvc (openSUSE-2021-84)

This update for viewvc fixes the following issues : - update to 1.1.28 boo1167974, CVE-2020-5283 : - security fix: escape subdir lastmod file name 211 - fix standalone.py first request failure 195 - suppress stack traces with option to show 140 - distinguish text/binary/image files by icons 166,...