OSV-2026-1127 Heap-buffer-overflow in read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=543583447 Crash type: Heap-buffer-overflow READ 1 Crash state: readdata zipsourcecall zipsourceread...

libzip:zip_read_metadata_fuzzer: Heap-buffer-overflow in read_data

Project: https://github.com/nih-at/libzip.git Detailed Report: https://oss-fuzz.com/testcase?key=5950954642669568 Project: libzip Fuzzing Engine: libFuzzer Fuzz Target: zipreadmetadatafuzzer Job Type: libfuzzerasanlibzip Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

EUVD-2017-5572

Malware in sbrugna...

CVE-2022-50438 net: hinic: fix memory leak when reading function table

In the Linux kernel, the following vulnerability has been resolved: net: hinic: fix memory leak when reading function table When the input parameter idx meets the expected case option in hinicdbggetfunctable, readdata is not released. Fix it...

CVE-2022-50438: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: net: hinic: fix memory leak when reading function table When the input parameter idx meets the expected case option in hinicdbggetfunctable, readdata is not released. Fix it...

CVE-2024-34453

TwoNav 2.1.13 contains an SSRF vulnerability via the url paramater to index.php?c=api&method=readdata&type=connectivitytest which reaches /system/api.php...

libarchive:libarchive_fuzzer: Heap-use-after-free in archive_read_format_rar_read_data

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=4763773670391808 Project: libarchive Fuzzing Engine: afl Fuzz Target: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

curl: Double-free in krb5 code

The function readdata in security.c in curl before version 7.51.0 is vulnerable to memory double free...

ALPINE-CVE-2016-8619

The function readdata in security.c in curl before version 7.51.0 is vulnerable to memory double free...

Double free

The function readdata in security.c in curl before version 7.51.0 is vulnerable to memory double free...

CVE-2016-8619

The function "readdata" in security.c in curl before version 7.51.0 is vulnerable to memory double free...

CVE-2016-8619

The function readdata in security.c in curl before version 7.51.0 is vulnerable to memory double free...

CVE-2016-8619: Use After Free

The function readdata in security.c in curl before version 7.51.0 is vulnerable to memory double free...

Ffmpeg 'read_data' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'readdata' function in the libavformat/hls.c file in FFmpeg version 3.3.3. A remote attacker can exploit this vulnerability to cause a denial of servi...

CVE-2017-14058

In FFmpeg 2.4 and 3.3.3, the readdata function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service infinite loop...

UBUNTU-CVE-2017-14058

In FFmpeg 2.4 and 3.3.3, the readdata function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service infinite loop...

CVE-2017-14058

In FFmpeg 2.4 and 3.3.3, the readdata function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service infinite loop...

CVE-2017-14058

FFmpeg vulnerability CVE-2017-14058 exists in the read_data function of libavformat/hls.c, where reload attempts are not restricted for an insufficient list, enabling a remote attacker to trigger a denial-of-service (infinite loop) when processing HLS content in FFmpeg 2.4 and 3.3.3. Public advis...

CVE-2017-14058

In FFmpeg 2.4 and 3.3.3, the readdata function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service infinite loop...

CVE-2017-14058

In FFmpeg 2.4 and 3.3.3, the readdata function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service infinite loop...