PT-2021-28039

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A heap buffer overflow read issue has been identified. The crash state indicates involvement of the sc pkcs15emu oberthur add data, sc oberthur parse privateinfo, and sc pkcs15emu oberthur in...

PT-2021-13007

Name of the Vulnerable Software and Affected Versions: Android versions 8.1 through 11 Description: The issue is related to a heap buffer overflow in the ih264d parse pslice function, which could lead to remote code execution without requiring additional execution privileges. User interaction is...

The vulnerability of the parse_args() function in the Sudo system administration program allows a malicious user to elevate their privileges to root level.

The vulnerability of the parseargs function in the Sudo system administration program is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

PT-2021-8104 · Htmldoc +4 · Htmldoc +4

Name of the Vulnerable Software and Affected Versions: htmldoc versions 1.9.12 and prior Description: The issue is related to a stack buffer overflow in the parse table function of the ps-pdf.cxx component. This can lead to arbitrary code execution and denial of service, allowing an attacker to...

kernel: Local buffer overflow in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c

A flaw was found in the Linux kernel. A local attacker, able to inject conntrack netlink configuration, could overflow a local buffer causing crashes or triggering the use of incorrect protocol numbers in ctnetlinkparsetuplefilter in net/netfilter/nfconntracknetlink.c. The highest threat from thi...

OSV-2018-288 Use-of-uninitialized-value in jbig2_decode_symbol_dict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9688 Crash type: Use-of-uninitialized-value Crash state: jbig2decodesymboldict jbig2symboldictionary jbig2parsesegment...

OSV-2018-280 Heap-buffer-overflow in xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7931 Crash type: Heap-buffer-overflow READ Crash state: xstrdup ftpparsewinntls wgetftplsfuzzer.c...

PT-2021-27567

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap buffer overflow read issue was identified, as reported by OSS-Fuzz. The crash occurred in the ftp parse winnt ls function, indicating a potential...

PT-2021-27383

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves several functions: vte write debug, do action,...

PT-2021-27406

Name of the Vulnerable Software and Affected Versions: GnuTLS affected versions not specified Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to a crash. The error is specifically...

PT-2021-27570

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read crash has been identified. The crash involves the xstrdup function and occurs in the ftp parse winnt ls function, as observed...

PT-2021-27599

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves functions such as jbig2 immediate generic region, jbig2 pars...

PT-2021-27564

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves several functions: add range, pdf map range to range, and pdf...

PT-2021-27572

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: jbig2 decode symbol dict, jbig2...

PT-2021-27414

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves several functions: vte write debug, do action,...

OSV-2018-212 Heap-buffer-overflow in token_stream_prepare

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9805 Crash type: Heap-buffer-overflow READ 1 Crash state: tokenstreamprepare parse typedeclparse...

OSV-2018-138 Heap-buffer-overflow in parse_odp_key_mask_attr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11160 Crash type: Heap-buffer-overflow READ 1 Crash state: parseodpkeymaskattr odpflowfromstring parsekeys...

PT-2021-27490

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions parse odp key mask attr, odp flow from string, and parse keys...

PT-2021-27629

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

PT-2021-27627

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions read bits 16, decode number, and parse tables. No information is...