CVE-2025-57320

The json-schema-editor-visual package (versions thru 1.1.1 ) is vulnerable to a Prototype Pollution vulnerability in the setData and deleteData functions. Due to insufficient validation of user-supplied input, an attacker can supply a crafted payload to inject or delete properties on Object.proto...

CVE-2025-57320

json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...

json-schema-editor-vue 安全漏洞

json-schema-editor-vue is a json editor by AlbertZhang personal developer. A security vulnerability exists in json-schema-editor-vue 1.1.1 and earlier versions, which stems from prototype contamination in the setData and deleteData functions, which could lead to a denial of service attack...

CVE-2025-57320: Improperly Controlled Modification of Object Prototype Attributes

json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...

The vulnerability of Mozilla Firefox and Firefox ESR browsers, related to errors in interpreting data loaded in multiple ways, allows attackers to read arbitrary files.

The vulnerability of Mozilla Firefox and Firefox ESR browsers is related to errors in interpreting data loaded in multiple ways. Exploiting this vulnerability allows a remote attacker to read arbitrary files by calling DataTransfer.setData...

OSV-2020-34 UNKNOWN READ in parquet::LevelDecoder::SetData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20666 Crash type: UNKNOWN READ Crash state: parquet::LevelDecoder::SetData parquet::ColumnReaderImplBaseparquet::PhysicalType parquet::ColumnReaderImplBaseparquet::PhysicalType...

OSV-2020-27 Heap-buffer-overflow in parquet::LevelDecoder::SetData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20940 Crash type: Heap-buffer-overflow READ 4 Crash state: parquet::LevelDecoder::SetData parquet::ColumnReaderImplBaseparquet::PhysicalType parquet::internal::TypedRecordReaderparquet::PhysicalType...

PT-2020-22221

Name of the Vulnerable Software and Affected Versions parquet affected versions not specified Description The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the parquet::LevelDecoder::SetData function and the parquet::ColumnReaderImplBase class. T...

PT-2020-22258

Name of the Vulnerable Software and Affected Versions parquet affected versions not specified Description The issue is related to a crash in the parquet library, specifically in the parquet::LevelDecoder::SetData function. The crash type is reported as UNKNOWN READ. The problem occurs in the...

CVE-2020-0129

In SetData of btmblemultiadv.cc, there is a possible out-of-bound write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID...

CVE-2020-0129

In SetData of btmblemultiadv.cc, there is a possible out-of-bound write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID...

Out-of-bounds

In SetData of btmblemultiadv.cc, there is a possible out-of-bound write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID...

CVE-2020-0129

In SetData of btmblemultiadv.cc, there is a possible out-of-bound write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID...

lcms2: Integer overflow in AllocateDataSet() in cmscgats.c leading to heap-based buffer overflow

Little CMS aka Little Color Management System 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile...

CVE-2018-16435

Little CMS aka Little Color Management System 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile...

CVE-2018-16435

Little CMS aka Little Color Management System 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile...

ALPINE-CVE-2018-16435

Little CMS aka Little Color Management System 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile...

Integer overflow

Little CMS aka Little Color Management System 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile...

CVE-2018-16435

CVE-2018-16435 affects Little CMS 2.9, where an integer overflow in cmscgats.c:AllocateDataSet enables a heap-based buffer overflow in SetData when processing a crafted file in cmsIT8LoadFromFile. No exploitation details are provided in the documents beyond the overflow risk. Remediation: upgrade...

CVE-2018-16435

Little CMS aka Little Color Management System 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile...