3 matches found
EUVD-2023-27401
Malicious code in bioql PyPI...
Malicious code in android-string_resources_validator (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
CVE-2023-23301
The news MonkeyC operation code in CIQ API version 1.0.0 through 4.1.7 fails to check that string resources are not extending past the end of the expected sections. A malicious CIQ application could craft a string that starts near the end of a section, and whose length extends past its end. Upon...