ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-overflow in gs_glyph_data_from_bytes

Detailed Report: https://oss-fuzz.com/testcase?key=5535574097788928 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0x7fffa255c540 Crash State:...

OSV-2022-724 Stack-buffer-underflow in gs_type2_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50306 Crash type: Stack-buffer-underflow READ 4 Crash state: gstype2interpret copiedtype1glyphoutline gsdefaultglyphinfo...

PT-2022-37189 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-underflow read error. Technical details about the crash include the functions gs type2 interpret, copied type1 gly...

CVE-2022-36947: Out-of-bounds Write

Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow...

PT-2022-23694

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer versions prior to 7.6 Description The issue is related to the unsafe parsing of a PNG tRNS chunk, which results in a stack buffer overflow. Recommendations For FastStone Image Viewer versions prior to 7.6, update to...

Omron CX-One Buffer Overflow

The vulnerability of the Omron CX-One software package arises due to an overflow in the buffer on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

OSV-2022-719 Stack-buffer-overflow in gs_glyph_data_from_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50267 Crash type: Stack-buffer-overflow WRITE 8 Crash state: gsglyphdatafromstring copiedtype1subrdata gstype2interpret...

PT-2022-37188

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the functions gs glyph data from string, copied type1 subr...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-underflow in gs_type2_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=5504389359468544 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7fcf758b641c Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-overflow in gs_glyph_data_from_string

Detailed Report: https://oss-fuzz.com/testcase?key=6152113700339712 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0x7ffcf5252b40 Crash State:...

GLSA-202208-30 : GNU Binutils: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-30 GNU Binutils: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in GNU Binutils. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

CVE-2022-28750 Zoom On-Premise Deployments: Stack Buffer Overflow in Meeting Connector

Zoom On-Premise Meeting Connector Zone Controller ZC before version 4.8.20220419.112 fails to properly parse STUN error codes, which can result in memory corruption and could allow a malicious actor to crash the application. In versions older than 4.8.12.20211115, this vulnerability could also be...

GLSA-202208-07 : LibRaw: Stack buffer overread

The remote host is affected by the vulnerability described in GLSA-202208-07 LibRaw: Stack buffer overread - Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identifyprocessdngfields in identify.cpp. CVE-2020-24870 Note that Nessus has not tested for this issue but has instead relied...

SUSE: Security Advisory (SUSE-SU-2022:2712-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Backdoor.Win32.Jokerdoor MVID-2022-0628 Buffer Overflow

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/783a191e7944e1af84ec0fa96d933f30.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Jokerdoor Vulnerability: Remote Stack Buffer Overflow Description: The...

openSUSE: Security Advisory for u-boot (SUSE-SU-2022:2654-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2022:2654-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:2661-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for u-boot (SUSE-SU-2022:2661-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2022:2661-1 Security update for u-boot

This update for u-boot fixes the following issues: - CVE-2022-33967: Fixed heap overflow in squashfs filesystem implementation bsc1201745. - CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command bsc1201214...