1281 matches found
FFmpeg 安全漏洞
FFmpeg is a complete solution for recording, converting and streaming audio and video. A heap buffer overflow vulnerability exists in getblockrow in libavfilter/vfbm3d.c in FFmpeg. An attacker could exploit this vulnerability to cause memory corruption...
GHSA-8GV3-57P6-G35R Heap buffer overflow in `RaggedTensorToTensor`
Impact An attacker can cause a heap buffer overflow in tf.rawops.RaggedTensorToTensor: python import tensorflow as tf shape = tf.constant10, 10, shape=2, dtype=tf.int64 values = tf.constant0, shape=1, dtype=tf.int64 defaultvalue = tf.constant0, dtype=tf.int64 l = 849, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0...
GHSA-HMG3-C7XJ-6QWM Heap buffer overflow in `SparseTensorToCSRSparseMatrix`
Impact An attacker can trigger a denial of service via a CHECK-fail in converting sparse tensors to CSR Sparse matrices: python import tensorflow as tf import numpy as np from tensorflow.python.ops.linalg.sparse import sparsecsrmatrixops indicesarray = np.array0, 0 valuearray = np.array0.0,...
PYSEC-2021-671
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in converting sparse tensors to CSR Sparse matrices. This is because the...
PYSEC-2021-488
TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow in tf.rawops.RaggedTensorToTensor. This is because the...
PYSEC-2021-671
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in converting sparse tensors to CSR Sparse matrices. This is because the...
PT-2022-12933 · Unknown +7 · Libjpeg-Turbo +7
Name of the Vulnerable Software and Affected Versions: libjpeg-turbo versions 2.0.90 and earlier Description: The issue is related to a heap-based buffer overflow in the get word rgb row function in rdppm.c, which occurs when using tjLoadImage to load a 16-bit binary PPM file into a grayscale...
Hasura GraphQL 1.3.3 Denial Of Service
Exploit Title: Hasura GraphQL 1.3.3 - Denial of Service Software: Hasura GraphQL Software Link: https://github.com/hasura/graphql-engine Version: 1.3.3 Author: Dolev Farhi Date: 4/19/2021 Tested on: Ubuntu import sys import requests import threading HASURASCHEME = 'http' HASURAHOST = '192.168.1.1...
SUSE: Security Advisory (SUSE-SU-2019:1687-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the downsample_row_box_filterf function in the poppler/CairoRescaleBox.cc library for displaying PDF files allows a hacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the downsamplerowboxfilterf function in the poppler/CairoRescaleBox.cc library, which is used for displaying PDF files, involves reading data beyond the allowable buffer size. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its...
CVE-2021-28029
An issue was discovered in the toodee crate before 0.3.0 for Rust. The row-insertion feature allows attackers to read the contents of uninitialized memory locations...
CVE-2021-28028
An issue was discovered in the toodee crate before 0.3.0 for Rust. Row insertion can cause a double free upon an iterator panic...
CVE-2021-28029
An issue was discovered in the toodee crate before 0.3.0 for Rust. The row-insertion feature allows attackers to read the contents of uninitialized memory locations...
CVE-2021-28028
An issue was discovered in the toodee crate before 0.3.0 for Rust. Row insertion can cause a double free upon an iterator panic...
Memory corruption
An issue was discovered in the toodee crate before 0.3.0 for Rust. The row-insertion feature allows attackers to read the contents of uninitialized memory locations...
CVE-2021-28029
An issue was discovered in the toodee crate before 0.3.0 for Rust. The row-insertion feature allows attackers to read the contents of uninitialized memory locations...
CVE-2021-28029: Use of Uninitialized Resource
An issue was discovered in the toodee crate before 0.3.0 for Rust. The row-insertion feature allows attackers to read the contents of uninitialized memory locations...
File Upload Vulnerability in Fast Reach CMS (CNVD-2021-15975)
Fast Row CMS is open source and free PHP enterprise website production, construction, development and optimization of SEO management system. FPS CMS has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...
PT-2021-8107 · Htmldoc +3 · Htmldoc +3
Name of the Vulnerable Software and Affected Versions: HTMLDOC version 1.9.12 Description: The issue is related to a heap buffer overflow in the render table row function, located in the ps-pdf.cxx component of the HTMLDOC tool. This overflow can lead to arbitrary code execution and denial of...