89 matches found
SUSE CVE-2021-38593
Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPaintEngineEx::stroke...
Cross-site Scripting (XSS)
Overview smoothie is a Smoothie Charts: smooooooth JavaScript charts for realtime streaming data Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper user input sanitization in strokeStyle and tooltipLabel properties. Exploiting this vulnerability is possib...
PT-2022-37319 · Git +1 · Skia
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the SkPath::Iter::next function, SkStroke::strokePat...
CVE-2022-35096
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via drawstroke at /gfxpoly/stroke.c...
UBUNTU-CVE-2022-35096
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via drawstroke at /gfxpoly/stroke.c...
SWFTools 缓冲区错误漏洞
SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools, which stems from a heap buffer overflow in the drawstroke location of /gfxpoly/stroke.c. The vulnerability is caused by the use of...
CVE-2022-35109
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via drawstroke at /gfxpoly/stroke.c...
UBUNTU-CVE-2022-35109
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via drawstroke at /gfxpoly/stroke.c...
CVE-2022-35109
SWFTools contains a heap-buffer overflow in draw_stroke implemented in /gfxpoly/stroke.c (commit 772e55a2). Affected component: SWFTools; root cause: heap-buffer overflow in drawing strokes. CVSSv3.1 base score 5.5 (Medium) with LOCAL attack vector, user interaction required, and high impact on a...
SWFTools 缓冲区错误漏洞
SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that originates from a heap buffer overflow in drawstroke in the /gfxpoly/stroke.c file...
PT-2022-22576 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A heap-buffer overflow issue was discovered in SWFTools via the draw stroke function at /gfxpoly/stroke.c. Recommendations: At the moment, there is no information about a newer version tha...
Denial Of Service (DoS)
Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPaintEngineEx::stroke...
OSV-2021-1741 Stack-buffer-overflow in line_join_points
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42796 Crash type: Stack-buffer-overflow WRITE 4 Crash state: linejoinpoints strokeaddcompat gxstrokepathonly...
Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke).
...
Out-of-bounds
Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPaintEngineEx::stroke...
Qt QLibrary 缓冲区错误漏洞
Qt QLibrary is a code framework and QLibrary is one of his libraries. A buffer error vulnerability exists in Qt QLibrary that stems from an out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPaintEngineEx::stroke...
Libass Integer Overflow Vulnerability
libass is a subtitle renderer based on the ASS/SSA format by an individual developer. A security vulnerability exists in libass version 0.14.0, which stems from a signed integer overflow due to a call to outline stroke by assoutlineconstruct. No details of the vulnerability are available at this...
DEBIAN-CVE-2020-26682
In libass 0.14.0, the assoutlineconstruct's call to outlinestroke causes a signed integer overflow...
