12098 matches found
CVE-2023-29580
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasmexprcreate at /libyasm/expr.c...
yasm 安全漏洞
yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in yasm version 1.3.0.55.g101bc, which stems from a segmentation violation in the function deleteToken on /nasm/nasm-pp.c. The vulnerability is caused by an error in the function deleteToke...
PT-2023-22320 · Yasm +1 · Yasm +1
Name of the Vulnerable Software and Affected Versions: yasm version 1.3.0.55.g101bc Description: A segmentation violation was discovered in yasm via the component yasm expr create at /libyasm/expr.c. Recommendations: For yasm version 1.3.0.55.g101bc, consider restricting access to the yasm expr...
CVE-2023-29581
CVE-2023-29581 affects yasm 1.3.0.55.g101bc; a segmentation violation occurs in the delete_Token function of nasm-pp.c. The issue could make a libyasm-based application unavailable, but vendor positions indicate no security relevance due to expected input validation or sandboxing. Connected sourc...
PT-2023-22312 · Cesanta · Cesanta Mjs
Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 2.20.0 Description: The issue is related to a SEGV vulnerability via gc sweep at src/mjs gc.c, which can lead to a Denial of Service DoS. Recommendations: For Cesanta MJS version 2.20.0, at the moment, there is no...
CVE-2023-29581
yasm 1.3.0.55.g101bc has a segmentation violation in the function deleteToken at modules/preprocs/nasm/nasm-pp.c. NOTE: although a libyasm application could become unavailable if this were exploited, the vendor's position is that there is no security relevance because there is either supposed to ...
CVE-2023-29580
CVE-2023-29580 affects yasm version 1.3.0.55.g101bc, where a segmentation violation is triggered by the function yasm_expr_create in /libyasm/expr.c. The vulnerability is described across multiple feeds as a segmentation fault with local access, low attack complexity, required user interaction, a...
CVE-2023-29576
Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4TrunAtom::SetDataOffsetint function in Ap4TrunAtom.h...
MGASA-2023-0136 Updated imgagmagick packages fix security vulnerability
A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulting in a denial o...
Updated imgagmagick packages fix security vulnerability
A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulting in a denial o...
CVE-2023-29576
Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4TrunAtom::SetDataOffsetint function in Ap4TrunAtom.h...
PT-2023-22316 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A segmentation violation was discovered in the AP4 TrunAtom::SetDataOffsetint function in Ap4TrunAtom.h. Recommendations: For Bento4 version 1.6.0-639, as a temporary workaround, consider disabling the AP...
CVE-2023-29576
Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4TrunAtom::SetDataOffsetint function in Ap4TrunAtom.h...
CVE-2023-29576
CVE-2023-29576 affects Bento4 v1.6.0-639. The vulnerability is a segmentation violation in AP4_TrunAtom::SetDataOffset(int) in Ap4TrunAtom.h, leading to denial of service. Sources consistently describe Bento4 v1.6.0-639 as affected and confirm the issue is a crash/DoS vector rather than remote co...
CVE-2023-29576
Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4TrunAtom::SetDataOffsetint function in Ap4TrunAtom.h...
Bento4 缓冲区错误漏洞
Bento4 is an open source C++ library for reading and writing MP4 files. A denial of service vulnerability exists in Bento4 version v1.6.0-639, which stems from the AP4TrunAtom::SetDataOffsetint function in Ap4TrunAtom.h containing a segmentation violation. An attacker can exploit this vulnerabili...
NewStart CGSL CORE 5.05 / MAIN 5.05 : qt5-qtserialport Multiple Vulnerabilities (NS-SA-2023-0011)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has qt5-qtserialport packages installed that are affected by multiple vulnerabilities: - QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document...
NewStart CGSL CORE 5.05 / MAIN 5.05 : qt5-qtxmlpatterns Multiple Vulnerabilities (NS-SA-2023-0020)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has qt5-qtxmlpatterns packages installed that are affected by multiple vulnerabilities: - QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document...
Medium: ImageMagick
Issue Overview: A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulti...