The vulnerability of the dither_func_fs function in the tosixel.c component of the SIXEL Libsixel encoder/decoder implementation allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ditherfuncfs function in the tosixel.c component of the SIXEL Libsixel encoder/decoder implementation is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the `put_weighted_pred_avg_16_fallback` function in the h.265 Libde265 implementation allows a perpetrator to cause a service failure.

The vulnerability of the putweightedpredavg16fallback function in the h.265 Libde265 implementation is related to writing outside the buffer boundaries. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created file...

The vulnerability of the OD_ReadUTF8String function in the odf_code.c component of the multimedia platform GPAC allows a perpetrator to cause a service failure.

The vulnerability of the ODReadUTF8String function in the odfcode.c component of the multimedia platform GPAC is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created media file...

The vulnerability of the put_qpel_0_0_fallback_16 function in the h.265 Libde265 implementation allows a attacker to trigger a service failure.

The vulnerability of the putqpel00fallback16 function in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

The vulnerability of the gf_fprintf function in the os_file.c component of the GPAC multimedia platform allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the gffprintf function in the osfile.c component of the GPAC multimedia platform is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the TIFFVGetField function in the libtiff/tif_dir.c component of the LibTIFF library allows a attacker to cause a service failure.

The vulnerability of the TIFFVGetField function in the libtiff/tifdir.c component of the LibTIFF library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure remotely...

The vulnerability of the TableLookUp::setTable function in the RawSpeed library of the Darktable application allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the TableLookUp::setTable function in the RawSpeed library of the Darktable application relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the genpstrx_text() component of the .fig Fig2dev file conversion utility allows a attacker to cause a service failure.

The vulnerability of the genpstrxtext component of the .fig Fig2dev file conversion utility is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure by converting an xfig file into a pstricks format...

expat: Large number of prefixed XML attributes on a single tag can crash libexpat

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to buffer overrun. The highest threat from this vulnerability is to availability...

The vulnerability of the Windows Event Tracing service in the Microsoft operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Event Tracing service is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

CVE-2022-0322

A flaw was found in the sctpmakestrresetreq function in net/sctp/smmakechunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUGON issue, leading to a denial of service DOS...

The vulnerability of the pjsua_call_dump function in the multimedia communication library PJSIP, related to the execution of operations outside the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of the pjsuacalldump function in the multimedia communication library PJSIP is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the HEVC Video Extension codec relates to the operation of writing records beyond buffer boundaries, allowing an attacker to execute arbitrary code.

Vulnerability of the HEVC Video Extension codecs when writing records beyond buffer boundaries in memory during HEIC file processing. Exploiting this vulnerability can allow attackers to execute arbitrary code by sending a specially crafted request...

expat: Large number of prefixed XML attributes on a single tag can crash libexpat

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to buffer overrun. The highest threat from this vulnerability is to availability...

The vulnerability of Microsoft Excel’s spreadsheet editor, related to the execution of operations beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code on the target system.

The vulnerability of Microsoft Excel spreadsheet editors is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system using a specially created file...

The vulnerability of the development environment “CX-Programmer,” which is part of the software suite “CX-One” designed for programming and configuring Omron PLCs, lies in the ability to write data beyond the buffer boundaries in memory. This allows attackers to disclose sensitive information or execute arbitrary code.

The vulnerability of the development environment “CX-Programmer,” which is part of the software suite “CX-One” designed for programming and configuring Omron PLCs, relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive...

RHEL 7 : .NET Core 3.1 on RHEL 7 (RHSA-2022:0829)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0829 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

RHEL 8 : .NET Core 3.1 (RHSA-2022:0827)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0827 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

RHEL 8 : .NET 6.0 (RHSA-2022:0826)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0826 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

RHEL 7 : .NET 5.0 on RHEL 7 (RHSA-2022:0828)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0828 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...