Arbitrary Command Execution

Overview pyxdg contains implementations of freedesktop.org standards in python. Affected versions of this package are vulnerable to Arbitrary Command Execution via the xdg.Menu.parse function. When it is possible to craft an evil menu file with a Category node containing Python injected code. The...

Updated perl-Email-Address package fixes security vulnerability

The parse method in the Email::Address module through 1.912 for Perl can consume a large amount of resources on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f" CVE-2018-12558...

UBUNTU-CVE-2019-6286

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar issue to CVE-2018-11693...

PT-2019-18074

Name of the Vulnerable Software and Affected Versions LibSass version 3.5.5 Description A heap-based buffer over-read issue exists in the Sass::Prelexer::skip over scopes function, located in prelexer.hpp, which is called from Sass::Parser::parse import. This issue is similar to a previously...

PT-2019-4656

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.1-rc1 Description A heap data infoleak was found in multiple locations, including the L2CAP PARSE CONF RSP function, in the Linux kernel. This issue is related to a buffer overflow in the heap, which can be...

radare2 'parseOperands' function stack buffer overflow vulnerability

radare2 is a set of libraries and tools for working with binary files. A stack buffer overflow vulnerability exists in the 'parseOperands' function in the libr/asm/arch/arm/armass64.c file in radare2 versions prior to 3.1.2. An attacker can exploit this vulnerability to cause a denial of service...

UBUNTU-CVE-2018-20460

In radare2 prior to 3.1.2, the parseOperands function in libr/asm/arch/arm/armass64.c allows attackers to cause a denial-of-service application crash caused by stack-based buffer overflow by crafting an input file...

LibRaw stack buffer overflow vulnerability (CNVD-2018-26473)

LibRaw is a C++ library developed by the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A stack-based buffer overflow vulnerability exists in the 'parsemakernote' function of the dcrawcommon.cpp file in LibRaw version 0.19.1. An attacker can exploit this...

Tiny C Compiler Out-of-Bounds Write Vulnerability

Tiny C Compiler is a C compiler for x86, X86-64 and ARM processors created by Fabrice Bellard. An out-of-bounds write vulnerability exists in the asmparsedirective function in tccasm.c in Tiny C Compiler also known as TinyCC or TCC 0.9.27, which can be exploited by an attacker via a specially...

DEBIAN-CVE-2018-20376

An issue was discovered in Tiny C Compiler aka TinyCC or TCC 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the asmparsedirective function in tccasm.c...

UBUNTU-CVE-2018-20376

An issue was discovered in Tiny C Compiler aka TinyCC or TCC 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the asmparsedirective function in tccasm.c...

DEBIAN-CVE-2018-20337

There is a stack-based buffer overflow in the parsemakernote function of dcrawcommon.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact...

UBUNTU-CVE-2018-20337

There is a stack-based buffer overflow in the parsemakernote function of dcrawcommon.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact...

PT-2022-19553

Name of the Vulnerable Software and Affected Versions GPAC version 2.1-DEV-rev87-g053aae8-master Description The issue is related to a Null Pointer Dereference vulnerability in the gf isom parse movie boxes internal function due to improper return value handling of GF SKIP BOX, causing a Denial o...

LibRaw 'parse_rollei()' function denial of service vulnerability

LibRaw is a C++ library for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A denial of service vulnerability exists in the LibRaw 'parserollei' function. An attacker can exploit the vulnerability to cause a DoS Denial of Service...

PT-2023-3416

Name of the Vulnerable Software and Affected Versions gpac versions prior to 2.2.2 Description The issue is related to a stack-based buffer overflow in the gpac multimedia platform, specifically in the xml sax parse function. This overflow can lead to a denial of service. Recommendations For...

PT-2023-15168 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a buffer overflow in the hevc parse vps extension function of media tools/av parsers.c. This function is used for parsing video parameters, and the buffer...

PT-2023-15453 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4Box version 2.1-DEV-rev644-g5c4df2a67 Description: The issue is related to a buffer overflow in the hevc parse vps extension function, located in the media tools/av parsers.c file at line 7662. This buffer overflow can be exploited,...

PT-2022-11257 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: Gpac versions through 1.0.1 Description: A null pointer dereference vulnerability exists via the gf avc parse nalu function in av parsers.c when using mp4box, which causes a denial of service. This issue leads to a segmentation fault...

PT-2022-11253 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions 1.0.1 and earlier Description: A null pointer deference issue exists via the naludmx parse nal avc function in reframe nalu, allowing a denial of service. Recommendations: For gpac versions 1.0.1 and earlier, consider disabling...