Input validation

libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfault when attempting to parse a malformed UTF-8 character. Users should upgrade to libvips version 8.14.4 or later when processing untruste...

UBUNTU-CVE-2023-40032

libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfault when attempting to parse a malformed UTF-8 character. Users should upgrade to libvips version 8.14.4 or later when processing untruste...

CVE-2023-40032

libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfault when attempting to parse a malformed UTF-8 character. Users should upgrade to libvips version 8.14.4 or later when processing untruste...

CVE-2023-40032 Potential segfault due to NULL pointer dereference in libvips

libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfault when attempting to parse a malformed UTF-8 character. Users should upgrade to libvips version 8.14.4 or later when processing untruste...

CVE-2023-40032 Potential segfault due to NULL pointer dereference in libvips

libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfault when attempting to parse a malformed UTF-8 character. Users should upgrade to libvips version 8.14.4 or later when processing untruste...

libvips Code Issues Vulnerabilities

libvips is an open source 2D image processing library. A code issue vulnerability exists in libvips 8.14.3 and earlier versions, which stems from an attempt to parse misformatted UTF-8 characters, where an attacker can cause a segmentation error in libvips via specially crafted SVG input...

[SECURITY] Fedora 37 Update: php-phpmailer6-6.8.1-1.fc37

PHPMailer - A full-featured email creation and transfer class for PHP Class Features Probably the world's most popular code for sending email from PHP! Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more Integrated SMTP support - send without a local...

Oracle Linux 8 : container-tools:ol8 (ELSA-2020-4694)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4694 advisory. - A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes cluster...

CVE-2023-28544

Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers...

Memory corruption

Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers...

CVE-2023-28544

CVE-2023-28544: Memory corruption in WLAN while sending a transmit command from HLOS to UTF handlers. Documented as a Qualcomm closed‑source component issue with a high impact (CVSS 7.8, Local, Low-Privilege attacker, No user interaction). Connected sources confirm the vulnerability involves WLAN...

CVE-2023-28544 Buffer Copy without Checking the Size of Input in WLAN Firmware

Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers...

PT-2023-21792 · Qualcomm · Snapdragon +184

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in WLAN when sending a transmit command from HLOS to UTF handlers. No information is provided about the estimated...

CVE-2023-40295

libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...

CVE-2023-21628

Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command...

Memory corruption

Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command...

CVE-2023-21628 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL

Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command...

CVE-2023-21628

CVE-2023-21628 describes a memory corruption (classic buffer overflow) in the WLAN HAL of Qualcomm chipsets when processing WMI-UTF or FTM TLV1 commands. The CVE is listed as a buffer copy without checking input size, leading to potential data corruption and high impact. Connected sources identif...

CVE-2023-2808

Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link...

Code injection

Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link...