1965 matches found
UBUNTU-CVE-2021-45764
GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shiftchunkoffsets.isra...
GPAC 缓冲区错误漏洞
GPAC is an open source multimedia framework. GPAC has a security vulnerability that stems from the discovery, via the function shiftchunkoffsets.isra, that GPAC v1.1.0 contains an invalid memory address dereference. No detailed vulnerability details are currently available...
PT-2022-12394 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC version 1.1.0 Description: An issue was discovered in GPAC, where an invalid memory address dereference occurs via the function shift chunk offsets.isra. Recommendations: For GPAC version 1.1.0, at the moment, there is no information abo...
In Expat (aka libexpat) before 2.4.3 a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g. allocating too few bytes or only freeing memory).
...
DEBIAN-CVE-2021-46044
A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1via ShiftMetaOffset.isra, which causes a Denial of Service context-dependent...
DEBIAN-CVE-2021-46040
A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the finplaceshiftmoovmetaoffsets function, which causes a Denial of Servie context-dependent...
CVE-2021-46039
A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shiftchunkoffsets.part function, which causes a Denial of Service context-dependent...
Null pointer dereference
A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the finplaceshiftmoovmetaoffsets function, which causes a Denial of Servie context-dependent...
PT-2022-12521 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A Pointer Dereference issue exists via the finplace shift moov meta offsets function, which causes a Denial of Service. Recommendations: For GPAC version 1.0.1, consider disabling the finplace shift moov meta...
PT-2022-12525 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A Pointer Dereference issue exists in GPAC, which causes a Denial of Service. This issue is context-dependent and occurs via ShiftMetaOffset.isra. Recommendations: For GPAC version 1.0.1, consider disabling the...
PT-2022-12520 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A Pointer Dereference issue exists via the shift chunk offsets.part function, which causes a Denial of Service. This issue is context-dependent. Recommendations: For GPAC version 1.0.1, as a temporary workaroun...
ALPINE-CVE-2021-45960
In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...
AZL-7124 CVE-2021-45960 affecting package expat for versions less than 2.4.3-1
In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...
DEBIAN-CVE-2021-45960
In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...
UBUNTU-CVE-2021-45960
In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...
CVE-2021-45960
In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...
PT-2021-6138 · Expat +12 · Expat +12
Name of the Vulnerable Software and Affected Versions: Expat aka libexpat versions prior to 2.4.3 Description: The issue is related to a left shift by 29 or more places in the storeAtts function in xmlparse.c, which can lead to realloc misbehavior, such as allocating too few bytes or only freeing...
CVE-2021-41272
Besu is an Ethereum client written in Java. Starting in version 21.10.0, changes in the implementation of the SHL, SHR, and SAR operations resulted in the introduction of a signed type coercion error in values that represent negative values for 32 bit signed integers. Smart contracts that ask for...
CVE-2021-41272
Besu is an Ethereum client written in Java. Starting in version 21.10.0, changes in the implementation of the SHL, SHR, and SAR operations resulted in the introduction of a signed type coercion error in values that represent negative values for 32 bit signed integers. Smart contracts that ask for...
Type confusion
Besu is an Ethereum client written in Java. Starting in version 21.10.0, changes in the implementation of the SHL, SHR, and SAR operations resulted in the introduction of a signed type coercion error in values that represent negative values for 32 bit signed integers. Smart contracts that ask for...