1542 matches found
CVE-2024-26335
CVE-2024-26335 affects swftools v0.9.2, with a segmentation violation in the state_free function (swftools/src/swfc-history.c), causing a Denial of Service in some reports. No patch details are provided in the documents; remediation information is not available. Notes from CNVD/CNNVD describe a D...
CVE-2024-26333
swftools v0.9.2 was discovered to contain a segmentation violation via the function freelines at swftools/lib/modules/swfshape.c...
CVE-2024-26333
swftools v0.9.2 was discovered to contain a segmentation violation via the function freelines at swftools/lib/modules/swfshape.c...
CVE-2024-26337
CVE-2024-26337 affects swftools, specifically version 0.9.2, where a segmentation violation is caused by the s_font function in swftools/src/swfc.c. The issue has limited public exploit detail in the provided sources, with several feeds (e.g., CNVD, NVD, Red Hat, Ubuntu OSV, Nessus) identifying a...
CVE-2024-26335
swftools v0.9.2 was discovered to contain a segmentation violation via the function statefree at swftools/src/swfc-history.c...
CVE-2024-26333
CVE-2024-26333 affects swftools version 0.9.2. The issue is a segmentation violation in the function free_lines within swftools/lib/modules/swfshape.c, which can cause abnormal termination/crash. This is supported by multiple connected sources (e.g., PT-2024-21356 notes a memory-access issue in f...
CVE-2024-26334
CVE-2024-26334 affects swftools v0.9.2, with a vulnerability in the compileSWFActionCode function (swftools/lib/action/actioncompiler.c) that leads to a segmentation fault. Several sources label this as a denial of service risk, and the issue is consistently described across multiple feeds as a s...
CVE-2024-26335
swftools v0.9.2 was discovered to contain a segmentation violation via the function statefree at swftools/src/swfc-history.c...
PT-2024-21356 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: swftools version 0.9.2 Description: The issue is related to a segmentation violation in the function free lines at swftools/lib/modules/swfshape.c. This indicates a potential memory access error that could lead to unexpected program behavior ...
CVE-2024-26337
swftools v0.9.2 was discovered to contain a segmentation violation via the function sfont at swftools/src/swfc.c...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 : libde265 vulnerabilities (USN-6677-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6677-1 advisory. It was discovered that libde265 could be made to dereference invalid memory. If a user or automated system we...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : libde265 vulnerabilities (USN-6659-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6659-1 advisory. It was discovered that libde265 could be made to write out of bounds. If a user or automated system were tricked into...
Slackware Linux 15.0 / current xpdf Multiple Vulnerabilities (SSA:2024-040-01)
The version of xpdf installed on the remote host is prior to 4.05. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-040-01 advisory. - XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service stack consumption via a crafted pdf...
GLSA-202402-06 : FreeType: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202402-06 FreeType: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in FreeType. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...
GLSA-202401-32 : libaom: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202401-32 libaom: Multiple Vulnerabilities - AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aomimage.c. CVE-2020-36129 - AOM v2.0.1 was discovered to contain a NULL pointer dereference via the...
Moderate: Red Hat Security Advisory: freetype security update
An update for freetype is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
RHEL 8 : freetype (RHSA-2024:0420)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0420 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual...
GHSA-PVCR-V8J8-J5Q3 Parsing JSON serialized payload without protected field can lead to segfault
Summary Calling jws.Parse with a JSON serialized payload where the signature field is present while protected is absent can lead to a nil pointer dereference. Details This seems to also affect other functions that calls Parse internally, like jws.Verify. My understanding of these functions from t...
[SECURITY] [DLA 3700-1] cjson security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3700-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz December 30, 2023 https://wiki.debian.org/LTS -...
