32259 matches found
Mozilla: Potential memory corruption in FileReader::DoReadData()
The Mozilla Foundation Security Advisory describes this flaw as: When reading a file, an uninitialized value could have been used as read limit...
Mozilla: Potential memory corruption in FileReader::DoReadData()
The Mozilla Foundation Security Advisory describes this flaw as: When reading a file, an uninitialized value could have been used as read limit...
Mozilla: Potential memory corruption in FileReader::DoReadData()
The Mozilla Foundation Security Advisory describes this flaw as: When reading a file, an uninitialized value could have been used as read limit...
Mozilla: Potential memory corruption in FileReader::DoReadData()
The Mozilla Foundation Security Advisory describes this flaw as: When reading a file, an uninitialized value could have been used as read limit...
Mozilla: Potential memory corruption in FileReader::DoReadData()
The Mozilla Foundation Security Advisory describes this flaw as: When reading a file, an uninitialized value could have been used as read limit...
sequoia-openpgp (1.8.1) potentially affected by CVE-2023-53161 via buffered-reader (1.1.3)
buffered-reader CARGO version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on buffered-reader and may be impacted: - sequoia-openpgp 1.8.1 Source cves: CVE-2023-53161 Source advisory: OSV:RUSTSEC-2023-0039...
golang: compress/gzip: stack exhaustion in Reader.Read
A flaw was found in golang. Calling the Reader, Read method on an archive that contains a large number of concatenated 0-length compressed files can cause a panic issue due to stack exhaustion...
golang: compress/gzip: stack exhaustion in Reader.Read
A flaw was found in golang. Calling the Reader, Read method on an archive that contains a large number of concatenated 0-length compressed files can cause a panic issue due to stack exhaustion...
PT-2025-31040 · Unknown +1 · Buffered-Reader +1
Name of the Vulnerable Software and Affected Versions: buffered-reader crate versions prior to 1.1.5 buffered-reader crate versions prior to 1.2.0 Description: The buffered-reader crate for Rust contains a flaw that allows out-of-bounds array access and a panic. Recommendations: Update the...
CVE-2023-21112
CVE-2023-21112 relates to a missing bounds check in AnalyzeMfcResp of NxpMfcReader.cc, causing a possible out-of-bounds read that could disclose local information. Affected software includes Android 11–13 (Android devices relying on this component). The vulnerability enables information disclosur...
UBUNTU-CVE-2023-31979
Catdoc v0.95 was discovered to contain a global buffer overflow via the function processfile at /src/reader.c...
kernel: ip: Fix data-races around sysctl_ip_prot_sock.
In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctlipprotsock. sysctlipprotsock is accessed concurrently, and there is always a chance of data-race. So, all readers and writers need some basic protection to avoid load/store-tearing...
kernel: tcp: Fix data-races around sysctl_tcp_mtu_probing.
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpmtuprobing. While reading sysctltcpmtuprobing, it can be changed concurrently. Thus, we need to add READONCE to its readers...
kernel: udp: Fix a data-race around sysctl_udp_l3mdev_accept.
In the Linux kernel, the following vulnerability has been resolved: udp: Fix a data-race around sysctludpl3mdevaccept. While reading sysctludpl3mdevaccept, it can be changed concurrently. Thus, we need to add READONCE to its reader...
kernel: ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh.
In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix a data-race around sysctlfibmultipathuseneigh. While reading sysctlfibmultipathuseneigh, it can be changed concurrently. Thus, we need to add READONCE to its reader...
Catdoc 安全漏洞
Catdoc is a program that reads MS-Word files and prints them readably, by Pete Warden, an individual developer in the United States. A security vulnerability exists in Catdoc version v0.95, which stems from the function processfile in /src/reader.c containing a global buffer overflow...
EulerOS Virtualization 3.0.2.0 : libjpeg-turbo (EulerOS-SA-2023-1733)
According to the versions of the libjpeg-turbo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a...
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...
Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the exportXFAData...