CVE-2021-45267

An invalid memory address dereference vulnerability exists in gpac 1.1.0 via the svgnodestart function, which causes a segmentation fault and application crash...

CVE-2021-24044

By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yield positions. This could result in segmentation fault as a consequence of type confusion error,...

CVE-2021-28040

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in osxml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached...

CVE-2021-29296

Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service. The vulnerability could be triggered by sending an HTTP request with URL /vctwan; the sbin/httpd would invoke the strchr function and take NULL as a first argument,...

CVE-2021-46539

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x8664-linux-gnu/libc.so.6+0x45a1f. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-36411

An issue has been found in libde265 v1.0.8 due to incorrect access control. A SEGV caused by a READ memory access in function deriveboundaryStrength of deblock.cc has occurred. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service...

CVE-2021-29619

TensorFlow is an end-to-end open source platform for machine learning. Passing invalid arguments e.g., discovered via fuzzing to tf.rawops.SparseCountSparseOutput results in segfault. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow...

CVE-2021-45262

An invalid free vulnerability exists in gpac 1.1.0 via the gfsgcommanddel function, which causes a segmentation fault and application crash...

CVE-2021-45260

A null pointer dereference vulnerability exists in gpac 1.1.0 in the lsrreadid.part function, which causes a segmentation fault and application crash...

CVE-2021-46313

The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function memmoveavxunalignederms . This vulnerability can lead to a Denial of Service DoS...

CVE-2021-45263

An invalid free vulnerability exists in gpac 1.1.0 via the gfsvgdeleteattributevalue function, which causes a segmentation fault and application crash...

CVE-2021-45266

A null pointer dereference vulnerability exists in gpac 1.1.0 via the lsrreadanimvaluesex function, which causes a segmentation fault and application crash...

CVE-2021-45773

A NULL pointer dereference in CS104IPAddresssetFromString at src/iec60870/cs104/cs104slave.c of lib60870 commit 0d5e76e can lead to a segmentation fault or application crash...

CVE-2021-46020

An untrusted pointer dereference in mrbvmexec of mruby v3.0.0 can lead to a segmentation fault or application crash...

CVE-2021-45259

An Invalid pointer reference vulnerability exists in gpac 1.1.0 via the gfsvgnodedel function, which causes a segmentation fault and application crash...

CVE-2021-45258

A stack overflow vulnerability exists in gpac 1.1.0 via the gfbifsdecprotolist function, which causes a segmentation fault and application crash...

CVE-2021-44510

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause a calculation of the size of calls to memset in opfnj3 in srport/opfnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the...

CVE-2021-44509

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in opfnj3 in srport/opfnj3.c in order to cause a segmentation fault and crash the application...

CVE-2021-44490

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in opfnj3 in srport/opfnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the application. This is a "- di...

CVE-2021-29376

ircII before 20210314 allows remote attackers to cause a denial of service segmentation fault and client crash, disconnecting the victim from an IRC server via a crafted CTCP UTC message...