Lucene search
+L

1119 matches found

OSV
OSV
added 2023/10/20 11:26 p.m.9 views

CVE-2023-45667 Null pointer dereference because of an uninitialized variable in stb_image

stbimage is a single file MIT licensed library for processing images. If stbiloadgifmain in stbiloadgiffrommemory fails it returns a null pointer and may keep the z variable uninitialized. In case the caller also sets the flip vertically flag, it continues and calls stbiverticalflipslices with th...

5.3CVSS6.2AI score0.01137EPSS
SaveExploits0References8
Ubuntu
Ubuntu
added 2023/10/18 2:40 p.m.65 views

USN-6437-1: VIPS vulnerabilities

Ziqiang Gu discovered that VIPS could be made to dereference a NULL pointer. If a user or automated system were tricked into processing a specially crafted input image file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubunt...

7.5CVSS6.6AI score0.02297EPSS
SaveExploits3
Cvelist
Cvelist
added 2023/10/11 11:49 a.m.26 views

CVE-2023-26370 ZDI-CAN-21257: Adobe Photoshop PSD File Parsing Uninitialized Variable Remote Code Execution Vulnerability

Adobe Photoshop versions 23.5.5 and earlier and 24.7 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

7.8CVSS7.9AI score0.00334EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/10/11 12:0 a.m.20 views

Adobe Photoshop PSD File Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSD...

7.8CVSS6.8AI score0.00334EPSS
SaveExploits0References1
Veracode
Veracode
added 2023/10/09 1:17 p.m.21 views

Denial Of Service (DoS)

binutils is vulnerable to Denial of Service DoS. An use of an uninitialized variable causes a logic fail in the bfdinitsectiondecompressstatus function, which may allow a local attacker to cause an application crash...

5.5CVSS6.5AI score0.00347EPSS
SaveExploits1References6Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/09/27 12:0 a.m.15 views

Mozilla Firefox JIT Boolean Conversion Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation...

5.4CVSS6.9AI score
SaveExploits0References1
NVD
NVD
added 2023/09/14 9:15 p.m.24 views

CVE-2023-25586

A flaw was found in Binutils. A logic fail in the bfdinitsectiondecompressstatus function may lead to the use of an uninitialized variable that can cause a crash and local denial of service...

5.5CVSS5AI score0.00347EPSS
SaveExploits1References5
OSV
OSV
added 2023/09/14 9:15 p.m.1 views

DEBIAN-CVE-2023-25586

A flaw was found in Binutils. A logic fail in the bfdinitsectiondecompressstatus function may lead to the use of an uninitialized variable that can cause a crash and local denial of service...

5.5CVSS5.1AI score0.00347EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/09/14 9:15 p.m.2 views

CVE-2023-25586

A flaw was found in Binutils. A logic fail in the bfdinitsectiondecompressstatus function may lead to the use of an uninitialized variable that can cause a crash and local denial of service...

5.5CVSS6AI score0.00347EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
added 2023/09/14 9:15 p.m.41 views

CVE-2023-25586

A flaw was found in Binutils. A logic fail in the bfdinitsectiondecompressstatus function may lead to the use of an uninitialized variable that can cause a crash and local denial of service...

5.5CVSS6AI score0.00347EPSS
SaveExploits1References3
Prion
Prion
added 2023/09/14 9:15 p.m.22 views

Denial of service

A flaw was found in Binutils. A logic fail in the bfdinitsectiondecompressstatus function may lead to the use of an uninitialized variable that can cause a crash and local denial of service...

1.9CVSS5.4AI score0.00347EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2023/09/14 8:49 p.m.91 views

CVE-2023-25586

CVE-2023-25586 affects Binutils: a logic fail in bfd_init_section_decompress_status may use an uninitialized variable, causing a crash and local denial of service. Connected advisories confirm a fixed Binutils version; upstream advisories (e.g., TencentOS/FreeBSD entries) indicate a newer Binutil...

5.5CVSS4.9AI score0.00347EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2023/09/14 8:49 p.m.32 views

CVE-2023-25586 Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized

A flaw was found in Binutils. A logic fail in the bfdinitsectiondecompressstatus function may lead to the use of an uninitialized variable that can cause a crash and local denial of service...

4.7CVSS5.8AI score0.00347EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2023/09/14 8:49 p.m.45 views

CVE-2023-25586

A flaw was found in Binutils. A logic fail in the bfdinitsectiondecompressstatus function may lead to the use of an uninitialized variable that can cause a crash and local denial of service...

5.5CVSS4.8AI score0.00347EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2023/09/14 8:49 p.m.22 views

CVE-2023-25586 Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized

A flaw was found in Binutils. A logic fail in the bfdinitsectiondecompressstatus function may lead to the use of an uninitialized variable that can cause a crash and local denial of service...

4.7CVSS6.3AI score0.00347EPSS
SaveExploits1References5
OSV
OSV
added 2023/09/14 8:49 p.m.23 views

CVE-2023-25586 Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized

A flaw was found in Binutils. A logic fail in the bfdinitsectiondecompressstatus function may lead to the use of an uninitialized variable that can cause a crash and local denial of service...

4.7CVSS6AI score0.00347EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2023/09/14 12:0 a.m.2 views

PT-2023-20182 · Binutils +1 · Binutils +1

Name of the Vulnerable Software and Affected Versions: Binutils affected versions not specified Description: A flaw was found in Binutils, where a logic fail in the bfd init section decompress status function may lead to the use of an uninitialized variable. This can cause a crash and local denia...

5.5CVSS4.6AI score0.00347EPSS
SaveExploits1References17
Positive Technologies
Positive Technologies
added 2023/08/22 12:0 a.m.5 views

PT-2023-7341 · Perl +3 · Perl +3

Name of the Vulnerable Software and Affected Versions: Perl version 5.34.0 Description: The issue is related to the S find uninit var function in the sv.c file of the Perl interpreter, which is associated with a buffer overflow. This can allow a remote attacker to execute arbitrary code or lead t...

10CVSS7.9AI score0.02046EPSS
SaveExploits1References24
Zero Day Initiative
Zero Day Initiative
added 2023/08/17 12:0 a.m.29 views

PDF-XChange Editor PDF File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6AI score0.00347EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/14 12:0 a.m.29 views

Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.8AI score0.02291EPSS
SaveExploits0References1
Rows per page
Query Builder