Heap-based Buffer Overflow

libmodbus.so is vulnerable to heap-based buffer overflow. The vulnerability exists in modbusreply function at src/modbus.c because it does not check for the null values earlier. which allows an attacker to cause a buffer overflow...

UBUNTU-CVE-2022-0367

A heap-based buffer overflow flaw was found in libmodbus in function modbusreply in src/modbus.c...

CVE-2022-0367

A heap-based buffer overflow flaw was found in libmodbus in function modbusreply in src/modbus.c...

CVE-2022-0367

A heap-based buffer overflow flaw was found in libmodbus in function modbusreply in src/modbus.c...

CVE-2022-0367

A heap-based buffer overflow flaw was found in libmodbus in function modbusreply in src/modbus.c...

CVE-2022-0367

CVE-2022-0367 affects libmodbus; a heap-based buffer overflow was found in modbus_reply() (src/modbus.c). Public advisories and multiple Debian/openSUSE/Nessus entries confirm this vulnerability and have issued security updates to libmodbus packages (e.g., Debian 3.1.4-2+deb10u2, 3.1.6-2+deb11u1;...

CVE-2022-0367: Improper Restriction of Operations within the Bounds of a Memory Buffer

A heap-based buffer overflow flaw was found in libmodbus in function modbusreply in src/modbus.c...

Out-of-bound Read

vim is vulnerable to out-of-bound read vulnerability. The vulnerability exists in the checkvim9unlet function in src/vim9cmds.c which allows a malicious attacker to read sensitive data in the system...

NULL Pointer Dereference in function sug_filltree

Description NULL Pointer Dereference in function sugfilltree at vim/src/spellfile.c:5600. vim version git log commit 4875d6ab068f09df88d24d81de40dcd8d56e243d grafted, HEAD - master, tag: v9.0.0224, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -X -Z -e -s -S /home/fuzz/test/poc2null.d...

CVE-2022-35433

ffjpeg commit caade60a69633d74100bd3c2528bddee0b6a1291 was discovered to contain a memory leak via /src/jfif.c...

CVE-2022-34999

JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl...

CVE-2022-35003

JPEGDEC commit be4843c was discovered to contain a global buffer overflow via ucDitherBuffer at /src/jpeg.inl...

CVE-2022-34998

JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl...

CVE-2022-36148

fdkaac commit 53fe239 was discovered to contain a floating point exception FPE via wavopen at /src/wavreader.c...

Buffer overflow

JPEGDEC commit be4843c was discovered to contain a global buffer overflow via ucDitherBuffer at /src/jpeg.inl...

Memory corruption

ffjpeg commit caade60a69633d74100bd3c2528bddee0b6a1291 was discovered to contain a memory leak via /src/jfif.c...

CVE-2022-35011

PNGDec commit 8abf6be was discovered to contain a global buffer overflow via inflatefast at /src/inffast.c...

CVE-2022-34998

JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl...

Remote Code Execution

react-editable-json-tree is vulnerable to remote code execution.The vulnerability exists in onSubmitValueParser prop which calls parse function in src/utils/parse.js because of missing sanitization of the parse parameters which allows a remote attacker to inject and execute malicious code into th...

JPEGDEC 安全漏洞

JPEGDEC is a JPEG decoder optimized for Arduino by the individual developer Larry Bank. A security vulnerability exists in JPEGDEC that stems from a segmentation error in the TIFFSHORT module of the /src/jpeg.inl file...