Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow. In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData. Remediation Upgrade tinyexr to version 1.0.6 or higher. References - GitHub Issue...

UBUNTU-CVE-2022-34300

In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData...

Malicious code in dabu-pixel-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaca1b92d60dec96122b40c1953ec1253c586ddc2e93d5fecd7ea4933b4d99a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2314 Malicious code in dabu-pixel-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaca1b92d60dec96122b40c1953ec1253c586ddc2e93d5fecd7ea4933b4d99a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2022-2085

A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the number of bits per...

CVE-2022-2085

A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the number of bits per...

UBUNTU-CVE-2022-2085

A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the number of bits per...

CVE-2022-2085

CVE-2022-2085 is a NULL pointer dereference in Ghostscript triggered when rendering a large number of bits; for bpp > 64, mem_x_device is used and init_device_procs is missing, causing crashes. The issue affects various Ghostscript deployments (e.g., Artifex Ghostscript and GPL Ghostscript) an...

PT-2022-14846 · Unknown +2 · Ghostscript +2

Name of the Vulnerable Software and Affected Versions: Ghostscript affected versions not specified Description: A NULL pointer dereference issue was found in Ghostscript, occurring when it attempts to render a large number of bits in memory. The problem arises when allocating a buffer device,...

CVE-2022-20182

CVE-2022-20182 concerns the Android kernel component handle_ramdump inside pixel_loader.c. The vulnerability arises from a missing permission check, enabling creation of a ramdump of non-secure memory and potentially leading to local information disclosure with SYSTEM privileges required. Exploit...

PT-2022-14412 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a missing permission check in the handle ramdump function of pixel loader.c, which could allow the creation of a ramdump of non-secure memory. This may lead to local information disclosure,...

TikTok: TikTok's pixel/sdk.js leaks current URL from websites using postMessage

A vulnerability was found where an oauth token could have been leaked due to an origin check bypass in the TikTok Pixel SDK. We thank @fransrosen for reporting this to our team...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Pixel Modem in Google Android. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. There is a security vulnerability in the Pixel Modem in Google Android...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Pixel Modem in Google Android. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. There is a security vulnerability in the Pixel Modem in Google Android...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. There is a security vulnerability in the Pixel Modem in Google Android...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Pixel Modem in Google Android. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Pixel Modem in Google Android. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Pixel Modem in Google Android. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...