9013 matches found
PT-2024-20563 · Libdicom · Libdicom
Name of the Vulnerable Software and Affected Versions: libdicom version 1.0.5 Description: A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom. This issue can be triggered by a specially crafted DICOM file, causing premature freeing o...
Imaging Data Commons libdicom Resource Management Error Vulnerability
Imaging Data Commons libdicom is the Imaging Data Commons C library for reading DICOM files. A resource management error vulnerability exists in Imaging Data Commons libdicom version 1.0.5, which stems from a post-release reuse vulnerability in the parsing of DICOM elements...
The vulnerabilities of the functions PKCS12_parse(), PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes(), and PKCS12_newpass() in the OpenSSL library allow a attacker to cause a service failure.
The vulnerabilities of the functions PKCS12parse, PKCS12unpackp7data, PKCS12unpackp7encdata, PKCS12unpackauthsafes, and PKCS12newpass in the OpenSSL library are related to pointer arithmetic errors. Exploiting these vulnerabilities could allow an attacker to cause a service failure...
PT-2024-40577 · Boost · Boost
Name of the Vulnerable Software and Affected Versions: boost affected versions not specified Description: The issue is related to a stack-overflow crash. Technical details about the crash include the involvement of specific function names such as parse subgraph, parse endpoint rest, and parse stm...
json-path: stack-based buffer overflow in Criteria.parse method
A stack overflow vulnerability was found in the Criteria.parse method in json-path. This issue occurs due to an uncontrolled recursion caused by specially crafted input, leading to a stack overflow. This vulnerability has the potential to trigger a crash, resulting in a denial of service...
json-path: stack-based buffer overflow in Criteria.parse method
A stack overflow vulnerability was found in the Criteria.parse method in json-path. This issue occurs due to an uncontrolled recursion caused by specially crafted input, leading to a stack overflow. This vulnerability has the potential to trigger a crash, resulting in a denial of service...
PT-2024-10422
Name of the Vulnerable Software and Affected Versions FFmpeg version 6.1.1 Description The issue is related to an integer overflow vulnerability in the parse options function of sbgdec.c within the libavformat module. This vulnerability allows for negative duration values to be accepted without...
PT-2024-21520
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a fix for an underflow in the parse server interfaces function. In this loop, the code checks if the size left is greater than the minimum size needed after each...
kernel: buffer overflow in nft_set_desc_concat_parse()
A vulnerability was found in the Linux kernel's nftsetdescconcatparse function .This flaw allows an attacker to trigger a buffer overflow via nftsetdescconcatparse , causing a denial of service and possibly to run code...
CVE-2023-43536 Buffer Over-read in WLAN Firmware
Transient DOS while parse fils IE with length equal to 1...
CVE-2023-43536: Buffer Over-read
Transient DOS while parse fils IE with length equal to 1...
avahi: Reachable assertion in avahi_rdata_parse
A vulnerability was found in Avahi. A reachable assertion exists in the avahirdataparse function...
AZL-33937 CVE-2024-0727 affecting package openssl for versions less than 1.1.1k-29
Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly. A file in PKCS12 format can contain certificates...
PT-2024-13312 · Gnome · Gnome Gtk
Name of the Vulnerable Software and Affected Versions: Gnome GTK affected versions not specified Description: The issue is related to a null pointer dereference in Gnome GTK, specifically via the parse settings function at xsettings-client.c. Recommendations: At the moment, there is no informatio...
libxml2: integer overflows with XML_PARSE_HUGE
A flaw was found in libxml2. Parsing a XML document with the XMLPARSEHUGE option enabled can result in an integer overflow because safety checks were missing in some functions. Also, the xmlParseEntityValue function didn't have any length limitation...
protobuf-c: unsigned integer overflow in parse_required_member
A vulnerability was found in protobuf-c. This security flaw leads to an unsigned integer overflow in parserequiredmember...
c-ares: Heap buffer over read in ares_parse_soa_reply
A heap buffer over-read flaw was found in c-ares via the aresparsesoareply function in aresparsesoareply.c...
OSV-2024-25 Stack-buffer-overflow in icu_75::PluralRuleParser::parse
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65873 Crash type: Stack-buffer-overflow WRITE 1 Crash state: icu75::PluralRuleParser::parse icu75::PluralRules::createRules plurrulefuzzer.cpp...