GHSA-5RCV-M4M3-HFH7 golang.org/x/text Infinite loop

Go version v0.3.3 of the x/text package fixes a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to...

CVE-2021-29563

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by exploiting a CHECK-failure coming from the implementation of tf.rawops.RFFT. Eigen code operating on an empty matrix can trigger on an assertion and will cause program termination...

PYSEC-2021-688

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by exploiting a CHECK-failure coming from the implementation of tf.rawops.IRFFT. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2,...

Google TensorFlow 安全漏洞

Google TensorFlow is an end-to-end open source machine learning platform. A denial of service vulnerability exists in the implementation of tf.rawops.IRFFT in Google TensorFlow. An attacker can exploit this vulnerability to cause a CHECK-failure denial of service...

Google TensorFlow 安全漏洞

Google TensorFlow is an end-to-end open source machine learning platform. A denial of service vulnerability exists in Google TensorFlow tf.rawops.RFFT. An attacker can exploit this vulnerability to cause a CHECK-failure denial of service...

The vulnerability of the sub-components of the General Ledger Update Transform and Reports component of the Oracle iSetup system, a business automation solution from Oracle E-Business Suite. This vulnerability allows an intruder to gain unauthorized access to the device.

The vulnerability of the General Ledger Update Transform and Reports components of the Oracle iSetup component in the Oracle E-Business Suite system involves code errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the device through HTT...

DEBIAN-CVE-2021-20311

A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero in sRGBTransformImage in the MagickCore/colorspace.c may trigger undefined behavior via a crafted image file that is submitted by an attacker processed by an application using ImageMagick. The highest threat from...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in void grk::N_AVX2::transform<grk::N_AVX2::DecompressDcShiftIrrev>

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5142828708659200 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

CVE-2021-2276

Vulnerability in the Oracle iSetup product of Oracle E-Business Suite component: General Ledger Update Transform, Reports. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2021-2849

Name of the Vulnerable Software and Affected Versions Oracle iSetup versions 12.1.3 and 12.2.3 through 12.2.10 Description The issue is related to errors in the code of the General Ledger Update Transform and Reports components of Oracle iSetup in the Oracle E-Business Suite system. This can allo...

CVE-2021-2276: Undefined Security Weakness

Vulnerability in the Oracle iSetup product of Oracle E-Business Suite component: General Ledger Update Transform, Reports. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2021-13882 · Unknown +3 · Imagemagick +3

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.11 Description: A flaw in ImageMagick may trigger undefined behavior via a crafted image file, potentially affecting system availability. The issue arises from a division by zero in the sRGBTransformImage...

kimageformats:kimgio_heif_fuzzer: Use-of-uninitialized-value in transform_4x4_luma_add_8_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=4630502691700736 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: transform4x4lumaadd8fallbac...

cryptofuzz:cryptofuzz-libressl: Crash in _gcry_sha256_transform_amd64_avx2

Detailed Report: https://oss-fuzz.com/testcase?key=4576343276781568 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-libressl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60e0008c0000 Crash State: gcrysha256transformamd64avx2...

gnupg:fuzz_list: Crash in _gcry_sha256_transform_amd64_avx2

Project: git://git.gnupg.org/gnupg.git Detailed Report: https://oss-fuzz.com/testcase?key=5277486319534080 Project: gnupg Fuzzing Engine: libFuzzer Fuzz Target: fuzzlist Job Type: libfuzzerasangnupg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x607000020000 Crash State:...

CVE-2021-25906

An issue was discovered in the basicdspmatrix crate before 0.9.2 for Rust. When a TransformContent panic occurs, a double drop can be performed...

CVE-2021-26026

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!JPEGTransW+0x000000000000c7f4 via a crafted BMP image...

PT-2021-27608

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: CachedXFORM4to3, cmsDoTransform...

Barco Transform NDN-210 Command Injection Vulnerability (CNVD-2021-04820)

The Barco Transform NDN-210 is a PC-based network graphics processor from Barco in the Netherlands. The device displays encoded streams from Gbit Ethernet/IP networks and supports formats such as H-264, MPEG-4, MPEG-2, MJPEG, V2D and ProServer. A command injection vulnerability exists in Barco...

PT-2021-27513

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: FT Set Transform,...