CVE-2020-7560

A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert all versions and Unity Pro former name of EcoStruxure™ Control Expert all versions, that could cause a crash of the software or unexpected code execution when opening a malicious file in EcoStruxure™ Control...

OSV-2020-2250 Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28415 Crash type: Heap-buffer-overflow READ 12 Crash state: grk::t1part1::T1Part1::decompress grk::DecompressBlockExec::open grk::T1DecompressScheduler::decompressBlock...

OSV-2020-2243 Heap-buffer-overflow in grk::BitIO::bytein

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28313 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::BitIO::bytein grk::BitIO::read grk::BitIO::getnumpasses...

OSV-2020-2193 Heap-buffer-overflow in sctp_process_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27900 Crash type: Heap-buffer-overflow READ 8 Crash state: sctpprocessinit sctpprocesscontrol sctpcommoninputprocessing...

Binary Vulnerability in TGA Image Processing by Kinco Designer Configuration Software of Shanghai BBK

Shanghai BUCO Automation Co., Ltd. has been focusing on the research, development, production, sales and related technical services of core components for industrial automation equipment control and industrial IoT/Internet software and hardware, and providing customers with equipment automation...

Stack Overflow Out-of-Bounds Write Vulnerability in Microsoft ChakraCore

Microsoft ChakraCore is an open source ChakraJavaScript scripting engine used by Microsoft in the Edge browser, or as a stand-alone JavaScript engine. A stack overflow out-of-bounds write vulnerability exists in Microsoft ChakraCore. An attacker could exploit this vulnerability to cause a softwar...

Null Pointer Reference Vulnerability in Microsoft ChakraCore

Microsoft ChakraCore is an open source ChakraJavaScript scripting engine used by Microsoft in the Edge browser, or as a stand-alone JavaScript engine. A null pointer reference vulnerability exists in Microsoft ChakraCore. An attacker could exploit this vulnerability to cause a software crash...

Heap out-of-bounds read vulnerability exists in ABC Lookout of Shanghai Zhanmeng Network Technology Co. Ltd (CNVD-2020-66604)

ABC Viewer is a permanent free image viewing software, intelligently turns on hardware acceleration and supports a variety of image formats. Shanghai Zhanmeng Network Science and Technology Co., Ltd. ABC to see the map of the existence of heap out-of-bounds read vulnerability, the vulnerability f...

Heap out-of-bounds read vulnerability exists in ABC Lookout of Shanghai Zhanmeng Network Technology Co. Ltd (CNVD-2020-64624)

ABC Viewer is a permanent free image viewing software, intelligently turns on hardware acceleration and supports a variety of image formats. Shanghai Zhanmeng Network Technology Co., Ltd. ABC to see the map of the existence of heap out-of-bounds read vulnerability, attackers can use the...

Hancom Office 2020 suffers from a memory corruption vulnerability (CNVD-2020-62411)

Hancom Office 2020 offers a feature-rich set of desktop productivity applications for performing common tasks such as word processing, spreadsheet modeling, graphical representation, and working with PDFs. A memory corruption vulnerability exists in Hancom Office 2020, which can be exploited by a...

Scintillating PDF Converter suffers from a denial-of-service vulnerability (CNVD-2020-62600)

Twinkle Light PDF Converter specializes in PDF conversion software, PDF file converter, including PDF to WORD, PDF to image, image to PDF, PDF to JPG, PDF merger, PDF compression and other related PDF conversion functions. A denial of service vulnerability exists in Scintillate PDF Converter. An...

Heap Overrun Write Vulnerability in ABC Lookalike (CNVD-2020-62788)

ABC Viewer is a permanent free image viewing software, intelligently turns on hardware acceleration and supports a variety of image formats. A heap out-of-bounds write vulnerability exists in ABC Viewer. An attacker can exploit the vulnerability to cause the software to crash...

Twinkle Light PDF Converter has a Denial of Service Vulnerability

Twinkle Light PDF Converter specializes in PDF conversion software, PDF file converter, including PDF to WORD, PDF to image, image to PDF, PDF to JPG, PDF merger, PDF compression and other related PDF conversion functions. A denial of service vulnerability exists in Scintillate PDF Converter. An...

OSV-2020-2086 Bad-cast to QPaintDevice from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26457 Crash type: Bad-cast Crash state: Bad-cast to QPaintDevice from invalid vptr QImage::operator= XCFImageFormat::readXCF...

Binary Vulnerability in Shenzhen Xunlei.com Culture Co. Light and Shadow Viewing (CNVD-2020-59418)

Light Viewer is a photo viewing software for the photography and designer crowd. Shenzhen Xunlei.com Culture Co., Ltd LightShadow Viewer has a binary vulnerability that can be exploited by attackers to cause the software to crash and cause a denial of service via the poc...

OSV-2020-2004 Use-of-uninitialized-value in grk::t1_ht::T1HT::postDecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26206 Crash type: Use-of-uninitialized-value Crash state: grk::t1ht::T1HT::postDecode grk::T1Decoder::decompressBlock grk::T1Decoder::decompress...

OSV-2020-1871 Segv on unknown address in s_DCTD_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21416 Crash type: Segv on unknown address Crash state: sDCTDprocess sreadbuf sprocessreadbuf...

OSV-2020-1845 Stack-buffer-overflow in void put_epel_hv_fallback<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25937 Crash type: Stack-buffer-overflow READ 2 Crash state: void putepelhvfallback accelerationfunctions::puthevcepelv void mcchroma...

Heap Overwrite Vulnerability in Light and Shadow Magic Hand of Shenzhen Xunlei.com Culture Limited (CNVD-2020-58808)

LightShadow Magic Hand is a software for improving and enhancing image quality and effect processing. Shenzhen Xunlei.com Culture Co., Ltd LightShadow Magic Hand has a heap of out-of-bounds writing vulnerabilities, an attacker can construct a special picture to cause the software to crash, and ca...

Shenzhen Xunlei.com Culture Co., Ltd. Light and Shadow Magic Hand has a heap of out-of-bounds writing vulnerability

LightShadow Magic Hand is a software for improving and enhancing image quality and effect processing. Shenzhen Xunlei.com Culture Co., Ltd LightShadow Magic Hand has a heap of out-of-bounds writing vulnerabilities, an attacker can construct a special picture to cause the software to crash, and ca...