xorg-x11-server: Leak of uninitialized heap memory from the X server to clients in AllocatePixmap of dix/pixmap.c

A flaw was found in the way the Xserver memory was not properly initialized. This issue leak parts of server memory to the X client. In cases where the Xorg server runs with elevated privileges, this flaw results in a possible ASLR bypass...

CVE-2021-28308

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation...

CVE-2021-28308

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation...

fltk crate for Rust 缓冲区错误漏洞

fltk crate for Rust is a cross-platform lightweight GUI library. It can be statically linked to produce small, standalone and fast GUI applications. A security vulnerability exists in fltk crate before 0.15.3 for Rust, which stems from a read overrun in the pixmap constructor due to a lack of...

CVE-2021-28308: Out-of-bounds Read

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation...

RUSTSEC-2021-0038 Multiple memory safety issues

Affected versions contain multiple memory safety issues, such as: - Setting a multi label type where an image doesn't exist would lead to a NULL pointer dereference. - Setting a window icon using a non-raster image which FLTK rasterizes lazily would lead to a NULL dereference. - Pixmap constructo...

PT-2021-17846

Name of the Vulnerable Software and Affected Versions: fltk crate versions prior to 0.15.3 Description: The issue is related to multiple memory safety problems. There is an out-of-bounds read due to the lack of input validation in the pixmap constructor. Additionally, NULL pointer dereferences ca...

PT-2021-27588

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: fz unpack tile, fz decomp image...

PT-2021-27608

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: CachedXFORM4to3, cmsDoTransform...

PT-2021-27577

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: fz unpack tile, fz decomp image...

PT-2021-27610

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: fz expand indexed pixmap, fz...

xorg-x11-server: Leak of uninitialized heap memory from the X server to clients in AllocatePixmap of dix/pixmap.c

A flaw was found in the way the Xserver memory was not properly initialized. This issue leak parts of server memory to the X client. In cases where the Xorg server runs with elevated privileges, this flaw results in a possible ASLR bypass...

CVE-2020-16600

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

DEBIAN-CVE-2020-16600

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

UBUNTU-CVE-2020-16600

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

CVE-2020-16600

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

CVE-2020-16600

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

PT-2020-14873 · Artifex +2 · Mupdf Library +2

Name of the Vulnerable Software and Affected Versions: Artifex Software, Inc. MuPDF library versions 1.17.0-rc1 and earlier Description: A Use After Free issue exists when a valid page is followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed...

CVE-2020-16600: Use After Free

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

Artifex Software MuPDF Resource Management Error Vulnerability

Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A resource management error vulnerability exists in Artifex Software MuPDF library 1.17.0-rc1 and earlier versions, which stems from when a valid page is followed by an invalid pixmap-sized page, resulting in the...