9002 matches found
CVE-2023-34194: Reachable Assertion
StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion and application exit via a crafted XML document with a '\0' located after whitespace...
CVE-2023-34194
StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion and application exit via a crafted XML document with a '\0' located after whitespace...
CVE-2023-34194
StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion and application exit via a crafted XML document with a '\0' located after whitespace...
kernel: use-after-free vulnerability in the smb client component
A flaw was found in the SMB client component in the Linux kernel. In case of an error in smb3fscontextparseparam, ctx-password was freed, but the field was not set to NULL, potentially leading to a use-after-free vulnerability. This flaw allows a local user to crash or potentially escalate their...
PT-2023-9053
Name of the Vulnerable Software and Affected Versions json-path version 2.8.0 Description The issue is related to a stack overflow in the Criteria.parse method of the json-path library. This can potentially allow a remote attacker to cause a denial of service. Recommendations For json-path versio...
PT-2023-8717
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read issue exists in the SMB client of the Linux kernel within the smb2 parse contexts function located in the fs/smb/client/smb2pdu.c module. The problem occurs when th...
PT-2023-35627 · Git +1 · Quickjs
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue has been identified, potentially causing a crash. The crash occurs in the js is live code, js parse statement or decl,...
The vulnerability of the cmNetBiosParseName function in Canon printer software of the imageCLASS D, imageCLASS MF, imageCLASS LBP, imagePROGRAF, PIXMA, MAXIFY series allows a hacker to execute arbitrary code.
The vulnerability of the cmNetBiosParseName function in Canon printer microprogramming systems of the imageCLASS D, imageCLASS MF, imageCLASS LBP, imagePROGRAF, PIXMA, and MAXIFY series is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to...
PT-2023-8026
Name of the Vulnerable Software and Affected Versions TinyXML versions through 2.6.2 Description The issue is related to the TiXmlDeclaration::Parse function in the tinyxmlparser.cpp component of the TinyXML XML parser. It involves the use of an assert operator when handling a null character 0...
CVE-2023-45781
In parsegapdata of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-40083
In parsegapdata of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability caused by a missing boundary check in parsegapdata in the utils.cc script. An attacker can exploit this vulnerability to obtain sensitive information...
PT-2023-29691 · Google · Android
Name of the Vulnerable Software and Affected Versions: The affected software and versions are not specified. Description: The issue is related to a possible out of bounds read in the parse gap data function due to a missing bounds check. This could lead to local information disclosure, requiring...
PT-2023-27258 · Google · Android
Name of the Vulnerable Software and Affected Versions: utils.cc affected versions not specified Description: The issue is related to a possible out of bounds read in the parse gap data function of utils.cc due to a missing bounds check. This could lead to local information disclosure and requires...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability due to a missing boundary check in parsegapdata in the utils.cc script. An attacker can exploit this vulnerability to obtain sensitive information...
PT-2023-7351 · Perl +2 · Perl +2
Name of the Vulnerable Software and Affected Versions: Perl versions 5.30.0 through 5.38.1 Description: The issue is related to the S parse uniprop string function in regcomp.c, which can write to unallocated space due to mishandling of a property name associated with a regular expression...
Improper Validation of Syntactic Correctness of Input
Overview Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in the phonenumbers.Parse function. An attacker can cause a panic by providing crafted input causing a "runtime error: slice bounds out of range". PoC go import "fmt"...
envoy:ext_proc_unit_test_fuzz: Container-overflow in std::__1::vector<antlr4::tree::ParseTree*, std::__1::allocator<antlr4::tree::Par
Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5368312854609920 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: extprocunittestfuzz Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Container-overflow READ Crash Address:...