CVE-2023-21090

In parseUsesPermission of ParsingPackageUtils.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

libvips:jpegsave_file_fuzzer: Heap-buffer-overflow in RegionItem::parse

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=4536474203979776 Project: libvips Fuzzing Engine: afl Fuzz Target: jpegsavefilefuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61100000560...

Google Android Resource Management Vulnerability

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a resource management error vulnerability that stems from uncontrolled resource consumption in the parseUsesPermission of the ParsingPackageUtils.java component, which can be exploited by an...

libheif:file-fuzzer: Heap-buffer-overflow in RegionItem::parse

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=6317581706592256 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

...

PT-2023-36662

Уязвимость функции mt7921 mcu parse response модуля drivers/net/wireless/mediatek/mt76/mt7921/mcu.c драйвера адаптеров беспроводной связи Mediatek ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю получить доступ к защищаемой...

PT-2025-37673

Name of the Vulnerable Software and Affected Versions Linux kernel versions affected versions not specified Description A kernel panic issue in the MT7921 driver was resolved. The issue stemmed from accessing unallocated memory eeprom.data within the mt7921 mcu parse response function, potentiall...

OESA-2023-1227 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

PT-2023-35776 · Git +1 · Systemd

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue, as reported by OSS-Fuzz. The crash involves the udev rule parse value function and is related to the...

DEBIAN-CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

Integer overflow

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

systemd:fuzz-udev-rule-parse-value: Crash in udev_rule_parse_value

Detailed Report: https://oss-fuzz.com/testcase?key=6367779711483904 Project: systemd Fuzzing Engine: centipede Fuzz Target: fuzz-udev-rule-parse-value Job Type: centipedeasansystemd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x1e667ad798bb Crash State: udevruleparsevalue...

Denial Of Service (DoS)

github.com/golang/go is vulnerable to Denial of Service DoS attacks. A malicious user is able to cause an infinite loop via integer overflows when calling any of the Parse functions which contain //line directives with very large line numbers, which can cause the application to crash...

UBUNTU-CVE-2023-26555

praecisparse in ntpd/refclockpalisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver...

PT-2023-2770 · Ntp +3 · Ntp +3

Name of the Vulnerable Software and Affected Versions: NTP version 4.2.8p15 Description: The issue is related to an out-of-bounds write in the praecis parse function in ntpd/refclock palisade.c. This could potentially allow a remote attacker to cause a denial of service by sending a specially...

PT-2025-53073

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the ASoC Audio System on Chip component, specifically within the mediatek common code in the parse dai link info function. The issue stems from missing...

PT-2023-6370 · Unknown · Supportcandy

Name of the Vulnerable Software and Affected Versions: SupportCandy versions prior to 3.1.5 Description: The issue is related to the lack of validation and escaping of user input in SQL statements, which could allow unauthenticated attackers to perform SQL injection attacks. This could enable...

AZL-37319 CVE-2023-24537 affecting package golang for versions less than 1.21.6-1

Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow...

DEBIAN-CVE-2023-24538

Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...