CVE-2024-33768

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsourceover...

CVE-2024-33767

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsource...

CVE-2024-33768

CVE-2024-33768 affects lunasvg v2.3.9 and is due to a segmentation violation in the composition_solid_source_over component, with the Snyk entry describing an out-of-bounds write and recommending upgrading to lunasvg 2.4.1 or higher. Some sources (PT-Security PT-2024-25471) confirm v2.3.9 as vuln...

CVE-2024-33767

CVE-2024-33767 affects lunasvg v2.3.9 with a segmentation violation in the composition_solid_source component (NVD). Connected sources corroborate an Out-of-bounds Write causing denial of service; remediation is to upgrade lunasvg to version 2.4.1 or higher.

CVE-2024-33767

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsource...

CVE-2024-33767

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsource...

CVE-2024-33768

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsourceover...

CVE-2024-33768

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsourceover...

Mageia: Security Advisory (MGASA-2024-0156)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-33767

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsource...

Updated cjson packages fix security vulnerabilities

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONInsertItemInArray at cJSON.c. CVE-2023-50471 cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONSetValuestring at cJSON.c. CVE-2023-50472...

MGASA-2024-0156 Updated cjson packages fix security vulnerabilities

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONInsertItemInArray at cJSON.c. CVE-2023-50471 cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONSetValuestring at cJSON.c. CVE-2023-50472...

libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system...

kernel: drm/amdgpu: unmap and remove csa_va properly

A locking violation was found in the Linux kernel's AMD GPU driver in the context save area cleanup path. A local user can trigger this issue when closing GPU contexts, causing the driver to unmap and remove virtual memory mappings without first reserving the root page directory buffer object. Th...

CVE-2024-34043

O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message...

PT-2024-25471 · Lunasvg · Lunasvg

Name of the Vulnerable Software and Affected Versions: lunasvg version 2.3.9 Description: The issue is related to a segmentation violation in the component composition solid source over. Recommendations: For lunasvg version 2.3.9, at the moment, there is no information about a newer version that...

CVE-2024-34043

O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message...

CVE-2024-34043

CVE-2024-34043 affects O-RAN RICAPP kpimon-go I-Release. The vulnerability is a segmentation violation triggered by a certain E2AP-PDU message in that release. Documented impact notes are low severity with local access and minimal user interaction (CVSS v3.1 base score 5.3). Connected sources (Re...

CVE-2024-34043

O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message...

Fedora 40 : libheif (2023-692921aeb2)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-692921aeb2 advisory. Automatic update for libheif-1.17.5-1.fc40. Changelog Fri Dec 15 2023 Dominik Mierzejewski - 1.17.5-2 - Update to 1.17.5 rhbz2244583 - Backport fixe...