498 matches found
CVE-2022-1381
global heap buffer overflow in skiprange in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...
Heap overflow
global heap buffer overflow in skiprange in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...
CVE-2022-1381 global heap buffer overflow in skip_range in vim/vim
global heap buffer overflow in skiprange in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...
OSV-2022-257 Segv on unknown address in flb_config_map_properties_check
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45670 Crash type: Segv on unknown address Crash state: flbconfigmappropertiescheck configmapfuzzer.c...
OSV-2022-185 Heap-use-after-free in Segment::write
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44951 Crash type: Heap-use-after-free READ 1 Crash state: Segment::write Doublewrite::writepages Doublewrite::flushtodisk...
OSV-2022-146 Stack-use-after-scope in tag_cfa_pattern::Put
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44590 Crash type: Stack-use-after-scope READ 1 Crash state: tagcfapattern::Put dngtiffdirectory::Put dngimagewriter::WriteTIFFWithProfile...
CVE-2022-0261
A heap based out-of-bounds write flaw was found in vim's ops.c. This flaw allows an attacker to trick a user to open a crafted file triggering an out-of-bounds write. This vulnerability is capable of crashing software, modify memory, and possible code execution. Mitigation Untrusted vim scripts...
Regular Expression Denial Of Service (ReDoS)
apache-james-mailbox-api is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used in the PrefixedRegex function in PrefixedRegex.java, allowing an attacker to cause an application crash by providing crafted IMAP list commands...
OSV-2021-1786 Segv on unknown address in r_buf_free
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43092 Crash type: Segv on unknown address Crash state: rbuffree destroy rbinfilefree...
OSV-2021-1779 Heap-use-after-free in Segment::write
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42996 Crash type: Heap-use-after-free READ 1 Crash state: Segment::write Doublewrite::writepages Doublewrite::flushtodisk...
CVE-2021-45267
An invalid memory address dereference vulnerability exists in gpac 1.1.0 via the svgnodestart function, which causes a segmentation fault and application crash...
CVE-2021-44923
A null pointer dereference vulnerability exists in gpac 1.1.0 in the gfdumpvrmldynfield.isra function, which causes a segmentation fault and application crash...
Heap-based Buffer Overflow in allinurl/goaccess
Description Good evening and Happy Turkey Day! We are truly thankful for the Open Source Security community this year. Whilst testing goaccess built from commit 9774249, we discovered a crafted log which can trigger a heap-buffer-overflow during a memcmp operation on line 1525 of /src/parser.c...
OSV-2021-1570 Heap-buffer-overflow in bfd_putl32
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40919 Crash type: Heap-buffer-overflow WRITE 1 Crash state: bfdputl32 bpfelfgenericreloc bfdperformrelocation...
OSV-2021-1515 Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40507 Crash type: Heap-use-after-free READ 1 Crash state: std::1::pairstd::1::treeiteratorstd::1::valuetypestd::1::basic dd::Propertiesimpl::set dd::eatpairs...
Denial Of Service (DoS)
MySQL is vulnerable to denial of service. An attacker is able to exploit the vulnerability by accessing the network and crashing the system...
Denial Of Service (DoS)
MySQL is vulnerable to denial of service. An attacker is able to exploit the vulnerability by accessing the network and crashing the system...
in squell/id3
Description Hello, I hope you're doing well. Whilst testing id3 built from commit 896d42a, we discovered crafted input which triggers a negative-size-param size=-1 error when when calling memcpy, causing the software to crash. Proof of Concept First... Second... echo...
OSV-2021-1346 UNKNOWN READ in state_VLC_dec::load_bytes
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39046 Crash type: UNKNOWN READ Crash state: stateVLCdec::loadbytes stateVLCdec::stateVLCdec htj2kdecode...