PT-2023-13229

Name of the Vulnerable Software and Affected Versions Libsndfile affected versions not specified Description The issue is related to multiple signed integers overflow in the au read header function in src/au.c and in the mat4 open and mat4 read header functions in src/mat4.c of Libsndfile. This...

Fix of CVE: CVE-2020-10543

CVE-2020-10543: fix signed integer overflow leading to heap buffer overrun...

Fix of CVE: CVE-2021-33574, CVE-2021-35942, CVE-2021-38604

Adopt pthreadattrcopy functionality, test case is included - CVE-2021-33574: avoid use-after-free vulnerability - CVE-2021-35942: avoid out-of-bounds read via signed integer overflow in array index - CVE-2021-38604: considered. No NULL pointer dereference is possible...

SUSE: Security Advisory (SUSE-SU-2021:14598-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:0153-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 Security Update : libass (SUSE-SU-2021:0936-1)

This update for libass fixes the following issues : CVE-2020-26682: Fixed a signed integer overflow in the call to outlinestroke bsc1177862. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

openSUSE Security Update : libass (openSUSE-2021-472)

This update for libass fixes the following issues : - CVE-2020-26682: Fixed a signed integer overflow in the call to outlinestroke bsc1177862. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

SUSE-SU-2021:0936-1 Security update for libass

This update for libass fixes the following issues: - CVE-2020-26682: Fixed a signed integer overflow in the call to outlinestroke bsc1177862...

MGASA-2021-0017 Updated libass packages fix security vulnerability

In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow. CVE-2020-26682...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. A signed integer overflow in MagickCore/histogram.c allows an attacker to crash the application...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. A division by zero can lead to outside the range of representable value in MagickCore/geometry.c and signed integer overflow in MagickCore/decorate.c...

[ASA-202011-19] libass: arbitrary code execution

Arch Linux Security Advisory ASA-202011-19 ========================================== Severity: Medium Date : 2020-11-19 CVE-ID : CVE-2020-26682 Package : libass Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1285 Summary ======= The package libass before...

CVE-2020-26682

In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow...

Integer overflow

In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow...

CVE-2020-26682

In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow...

CVE-2020-26682

CVE-2020-26682 affects libass 0.14.0, where the call to outline_stroke inside ass_outline_construct can trigger a signed integer overflow. This vulnerability may cause a crash or, per multiple advisories, could enable arbitrary code execution under certain conditions. Several connected sources no...

CVE-2020-26682

In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow...

CVE-2020-26682: Integer Overflow or Wraparound

In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow...

Fix of 227 CVE

Fix bug 69720: Null pointer dereference in phargetfpoffset - Fix bug 70728: Type Confusion Vulnerability in PHPtoXMLRPCworker - Fix bug 70661: Use After Free Vulnerability in WDDX Packet Deserialization - Fix bug 70741: Session WDDX Packet Deserialization Type Confusion Vulnerability - Fix bug...

PT-2020-16484

Name of the Vulnerable Software and Affected Versions libass version 0.14.0 Description The issue is caused by a signed integer overflow in the ass outline construct function's call to outline stroke. Recommendations For libass version 0.14.0, consider disabling the ass outline construct function...