EUVD-2018-6474

Malware in sbrugna...

EUVD-2018-6472

Malware in sbrugna...

EUVD-2018-6471

Malware in sbrugna...

GHSA-M2W9-RM58-MHM9 Downloads Resources over HTTP in node-thulac

Affected versions of node-thulac insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

Downloads Resources over HTTP in node-thulac

Affected versions of node-thulac insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

THULAC Null Pointer Dereference Vulnerability

THULAC is a Chinese lexical analysis toolkit introduced by the Natural Language Processing and Social Humanities Computing Laboratory of Tsinghua University, which supports Chinese word segmentation and lexical annotation functions. A null pointer dereference vulnerability exists in the...

THULAC Memory Corruption Vulnerability

THULAC is a Chinese lexical analysis toolkit introduced by the Natural Language Processing and Social Humanities Computing Laboratory of Tsinghua University, which supports Chinese word segmentation and lexical annotation functions. A memory corruption vulnerability exists in the libthulac.so fil...

THULAC Buffer Out-of-Bounds Read Vulnerability

THULAC is a Chinese lexical analysis toolkit introduced by the Natural Language Processing and Social Humanities Computing Laboratory of Tsinghua University, which supports Chinese word segmentation and lexical annotation functions. The 'NGramFeature::findbases ' function in the...

CVE-2018-14562

An issue was discovered in libthulac.so in THULAC through 2018-02-25. A NULL pointer dereference can occur in the BasicModel class in include/cbmodel.h...

CVE-2018-14565

An issue was discovered in libthulac.so in THULAC through 2018-02-25. A heap-based buffer over-read can occur in NGramFeature::findbases in include/cbngramfeature.h...

CVE-2018-14563

An issue was discovered in libthulac.so in THULAC through 2018-02-25. "operator delete" is used with "operator new" in the TaggingLearner class in include/cbtagginglearner.h, possibly leading to memory corruption...

Heap overflow

An issue was discovered in libthulac.so in THULAC through 2018-02-25. A heap-based buffer over-read can occur in NGramFeature::findbases in include/cbngramfeature.h...

CVE-2018-14562

An issue was discovered in libthulac.so in THULAC through 2018-02-25. A NULL pointer dereference can occur in the BasicModel class in include/cbmodel.h...

Null pointer dereference

An issue was discovered in libthulac.so in THULAC through 2018-02-25. A NULL pointer dereference can occur in the BasicModel class in include/cbmodel.h...

CVE-2018-14563

An issue was discovered in libthulac.so in THULAC through 2018-02-25. "operator delete" is used with "operator new" in the TaggingLearner class in include/cbtagginglearner.h, possibly leading to memory corruption...

CVE-2018-14564

An issue was discovered in libthulac.so in THULAC through 2018-02-25. A SEGV can occur in NGramFeature::findbases in include/cbngramfeature.h...

CVE-2018-14563

THULAC’s libthulac.so (up to 2018-02-25) is affected by CVE-2018-14563 due to a memory corruption issue caused by using operator delete with operator new[] in the TaggingLearner class (include/cb_tagging_learner.h). The NVD entry lists a high to critical impact, with CVSS v3 base score 9.8 and ve...

CVE-2018-14563

An issue was discovered in libthulac.so in THULAC through 2018-02-25. "operator delete" is used with "operator new" in the TaggingLearner class in include/cbtagginglearner.h, possibly leading to memory corruption...

CVE-2018-14562

THULAC’s libthulac.so (THULAC) up to 2018-02-25 contains a NULL pointer dereference in the BasicModel class (include/cb_model.h). CNVD-2019-06620 describes a NULL pointer dereference in libthulac.so and notes exploitation could cause a denial of service via a NULL pointer backreference to the asi...

CVE-2018-14564

CVE-2018-14564 : A segmentation fault can occur in libthulac.so within THULAC up to 2018-02-25, specifically in NGramFeature::find_bases (include/cb_ngram_feature.h). Documents confirm the software component and the root cause; they describe a crash as the impact. No exploit details or mitigation...