PT-2023-11593

Name of the Vulnerable Software and Affected Versions nasm versions 2.14.03 through 2.15 Description A Segmentation Fault issue in the ieee segment function in outieee.c allows remote attackers to cause a denial of service via crafted assembly files. Recommendations For nasm versions 2.14.03...

CVE-2020-19725

CVE-2020-19725 affects Z3 up to version 4.8.8, rooted in a use-after-free in pdd_simplifier.cpp during constraint simplification. This can cause segmentation faults or arbitrary code execution. Mitigation: upgrade to Z3 4.8.8+ (recommended fixes vary by distro; some advisories cite 4.9.1+). Explo...

CVE-2020-18378

A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as...

CVE-2023-38666

CVE-2023-38666 affects Bento4 v1.6.0-639, where a segmentation fault occurs in the AP4_Processor::ProcessFragments function within mp4encrypt. The vulnerability is described as a denial-of-service risk. PT-2023-26539 recommends temporarily disabling AP4 Processor::ProcessFragments as a workaround...

CVE-2023-38666

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4Processor::ProcessFragments function in mp4encrypt...

CVE-2020-19725

There is a use-after-free vulnerability in file pddsimplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution...

PT-2023-11602 · Unknown +1 · Oggvideotools +1

Name of the Vulnerable Software and Affected Versions: oggvideotools version 0.9.1 Description: A Segmentation Fault issue was discovered in the StreamSerializer::extractStreams function in streamSerializer.cpp, allowing remote attackers to cause a denial of service crash via the opening of a...

CVE-2020-18382

Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlockwasm::Block in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-opt...

CVE-2020-19725

There is a use-after-free vulnerability in file pddsimplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution...

CVE-2020-18378

A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as...

CVE-2020-18382

Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlockwasm::Block in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-opt...

CVE-2020-18382

Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlockwasm::Block in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-opt...

CVE-2020-21528

CVE-2020-21528 is a NASM segmentation fault in ieee_segment (outieee.c) that allows denial of service via a crafted assembly file. Affected products/versions cited in connected docs include NASM 2.14.03 and 2.15. Upstream/OS advisories recommend upgrading to NASM 2.16.01 or newer to remediate (e....

CVE-2023-38666

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4Processor::ProcessFragments function in mp4encrypt...

CVE-2020-21723

oggvideotools 0.9.1 contains a vulnerability in StreamSerializer::extractStreams (streamSerializer.cpp) that can be triggered by opening crafted OGG files, enabling denial of service via remote exploitation. No patch/version with fix is documented in the provided connected sources. A possible wor...

Low: wavpack

Issue Overview: A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ===================================================================84257==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 pc 0x561b47a970c6 bp...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : LibTIFF vulnerabilities (USN-6290-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6290-1 advisory. It was discovered that LibTIFF could be made to write out of bounds when processing certain malformed image...

OESA-2023-1486 sqlite security update

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...

OESA-2023-1485 sqlite security update

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...

OESA-2023-1484 sqlite security update

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...