23 matches found
PT-2026-21413
Name of the Vulnerable Software and Affected Versions libvips versions prior to 8.19.0 Description A heap-based buffer overflow exists in the vips source read to memory function within the libvips/iofuncs/source.c file. The issue is triggered by a manipulation that can be launched locally. The...
Grafana -- Grafana DS proxy race condition
Grafana Labs reports: We have discovered a vulnerability with Grafana’s data source query endpoints that could end up crashing a Grafana instance. If you have public dashboards PD enabled, we are scoring this as a CVSS 7.5 High. If you have disabled PD, this vulnerability is still a risk, but...
CVE-2021-0971
In MPEG4Source::read of MPEG4Extractor.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10...