Lucene search
+L

6 matches found

Snyk
Snyk
•added 2026/07/09 11:20 p.m.•12 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the BGP OPEN capability parsing process. An attacker can influence peer AS validation and capability negotiation by sending a specially crafted BGP OPEN message with a malformed capability length, causing the parse...

8.2CVSS6.1AI score0.00332EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/09 11:20 p.m.•11 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the BGP OPEN capability parsing process. An attacker can influence peer AS validation and capability negotiation by sending a specially crafted BGP OPEN message with a malformed capability length, causing the parse...

8.2CVSS6.1AI score0.00332EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/05/21 2:29 a.m.•24 views

SUSE CVE-2026-32739

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 800-byte HEIF sequence file causes an infinite loop in Boxstts::getsampleduration, consuming 100% CPU indefinitely with zero progress, leading to DoS. The loop has no iteration limit or timeout and...

5.5CVSS5.7AI score0.00388EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/05/19 7:10 p.m.•26 views

EUVD-2026-30975

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 800-byte HEIF sequence file causes an infinite loop in Boxstts::getsampleduration, consuming 100% CPU indefinitely with zero progress, leading to DoS. The loop has no iteration limit or timeout and...

6.5CVSS5.7AI score0.00388EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/05/19 12:00 a.m.•25 views

PT-2026-42002

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.22.0 Description An issue in the HEIF and AVIF file format decoder and encoder allows a specially crafted 800-byte HEIF sequence file to trigger an infinite loop in the Box stts::get sample duration function. This...

8.8CVSS5.8AI score0.00559EPSS
SaveExploits3References74
OSV
OSV
•added 2024/02/21 5:15 p.m.•12 views

AZL-43822 CVE-2024-24478 affecting package wireshark 4.0.8-1

An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissectbgpopentvbuffttvb, prototreetree, packetinfopinfo, optlen components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected...

7.2AI score0.00979EPSS
SaveExploits0References1
Rows per page
Query Builder