Bento4 security vulnerabilities

Bento4 is an open source C++ library for reading and writing MP4 files. A denial of service vulnerability exists in Bento4 version 1.6.0-639, which originates in the AP4StdcFileByteStream::CreateAP4FileByteStream, char const , AP4FileByteStream::Mode, AP4ByteStream& function does not free or fail...

CVE-2022-38222

There is a use-after-free issue in JBIG2Stream::close located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to for example the pdfimages binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact...

XPDF Resource Management Error Vulnerability

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. A security vulnerability exists in XPDF version 4.04, which stems from a reuse-after-release issue in JBIG2Stream::close in JBIG2Stream.cc, and can be...

Apache Kafka Denial of Service Vulnerability

Apache Kafka is an open source distributed streaming platform from the Apache Foundation in the United States. The platform is capable of capturing real-time data and is used to build applications that react in real-time to changes in the data stream. Apache Kafka suffers from a denial-of-service...

PT-2022-37303 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

PT-2022-37758

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51689 Crash type: Stack-use-after-scope READ Crash state: RefCopyBytes dng stream::Put tag data ptr::Put...

CVE-2022-35091

SWFTools commit 772e55a2 was discovered to contain a floating point exception FPE via DCTStream::readMCURow at /xpdf/Stream.cc.ow...

CVE-2022-35099

SWFTools commit 772e55a2 was discovered to contain a stack overflow via ImageStream::getPixelunsigned char at /xpdf/Stream.cc...

UBUNTU-CVE-2022-35094

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::readHuffSymDCTHuffTable at /xpdf/Stream.cc...

UBUNTU-CVE-2022-35091

SWFTools commit 772e55a2 was discovered to contain a floating point exception FPE via DCTStream::readMCURow at /xpdf/Stream.cc.ow...

CVE-2022-35099

SWFTools commit 772e55a2 was discovered to contain a stack overflow via ImageStream::getPixelunsigned char at /xpdf/Stream.cc...

CVE-2022-35094

CVE-2022-35094 affects SWFTools, specifically the commit 772e55a2, where a heap-buffer overflow is reported in DCTStream::readHuffSym(DCTHuffTable*) within /xpdf/Stream.cc. The connected documents confirm the root cause is a heap overflow in that function and reference the affected SWFTools commi...

CVE-2022-35091

Summary : CVE-2022-35091 stems from a floating point exception in SWFTools via DCTStream::readMCURow() in /xpdf/Stream.cc.ow(), tied to SWFTools commit 772e55a2. What’s affected : SWFTools (the SWF tools suite) using the referenced code path; explicit product/vendor/version details beyond the com...

OESA-2022-1941 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A flaw was found in the sctpmakestrresetreq function in net/sctp/smmakechunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated...

DEBIAN-CVE-2022-35951

Redis is an in-memory database that persists on disk. Versions 7.0.0 and above, prior to 7.0.5 are vulnerable to an Integer Overflow. Executing an XAUTOCLAIM command on a stream key in a specific state, with a specially crafted COUNT argument may cause an integer overflow, a subsequent heap...

UBUNTU-CVE-2022-35951

Redis is an in-memory database that persists on disk. Versions 7.0.0 and above, prior to 7.0.5 are vulnerable to an Integer Overflow. Executing an XAUTOCLAIM command on a stream key in a specific state, with a specially crafted COUNT argument may cause an integer overflow, a subsequent heap...

SWFTools security vulnerabilities

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that stems from a floating point exception FPE issue in the DCTStream::readMCURow location of /xpdf/Stream.cc.ow...

SWFTools buffer error vulnerability

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that stems from a global buffer overflow in the DCTStream::transformDataUnit location of /xpdf/Stream.cc...

SWFTools buffer error vulnerability

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools, which stems from a heap buffer overflow in the DCTStream::readHuffSymDCTHuffTable location of /xpdf/Stream.cc...

PT-2025-41049

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the xhci alloc stream info function within the USB host controller interface of the Linux kernel. The function allocates memory for a stream context array but fai...