CVE-2023-39743

CVE-2023-39743 affects lrzip-next LZMA v23.01. The vulnerability arises in the decoding path: an access violation in the component /bz3_decode_block, specifically in src/libbz3.c, as the root cause. Documentation repeatedly states this leads to a potential denial of service or crash (availability...

PT-2023-27099 · Unknown · Lrzip-Next

Name of the Vulnerable Software and Affected Versions: lrzip-next LZMA version 23.01 Description: The issue is related to an access violation in the component /bz3 decode block, located in the src/libbz3.c file. This access violation can be exploited, potentially leading to unintended consequence...

CVE-2023-39743

lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3decodeblock src/libbz3.c...

CVE-2023-39743

lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3decodeblock src/libbz3.c...

A week in security (August 7 - August 13)

Last week on Malwarebytes Labs: Zoom clarifies user consent requirement when training its AI Several hospitals still counting the cost of widespread ransomware attack Old exploit kits still kicking around in 2023 YouTube makes sweeping changes to tackle spam on Shorts videos Googles "browse...

OESA-2023-1486 sqlite security update

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...

SUSE-SU-2023:3257-1 Security update for pipewire

This update for pipewire fixes the following security issues: - Fixed issue where an app which only has permission to access one stream can also access other streams bsc1213682. Bugfixes: - Fixed division by 0 and other issues with invalid values glfopipewire/pipewire2953 - Fixed an overflow...

TikTok facing fines for violating children’s privacy

The European Data Protection Board is expected to fine TikTok for violating the privacy of young children within the next four weeks. The European Data Protection Board said a binding decision has been reached over TikTok's processing of childrens data, after the ByteDance-owned app submitted leg...

protocol-http1 environmental issue vulnerability

protocol-http1 is a low-level implementation of HTTP/1. An environmental issue vulnerability exists in protocol-http1 versions prior to 0.15.1, which stems from an RFC rule violation by Falcon, leading to HTTP request smuggling and firewall bypass issues...

CVE-2020-20703

A use-after-free flaw was found in Vim. This issue allows a heap buffer overflow leading to a write access violation. This flaw allows the attacker to possibly have control over the write address and value, which may lead to an application crash. Mitigation Untrusted vim scripts with -s scriptin...

CVE-2023-39113

ngiflib commit fb271 was discovered to contain a segmentation violation via the function "main" at gif2tag.c. This vulnerability is triggered when running the program gif2tga...

CVE-2023-39113

ngiflib commit fb271 was discovered to contain a segmentation violation via the function "main" at gif2tag.c. This vulnerability is triggered when running the program gif2tga...

CVE-2023-39114

ngiflib commit 84a75 was discovered to contain a segmentation violation via the function SDLLoadAnimatedGif at ngiflibSDL.c. This vulnerability is triggered when running the program SDLaffgif...

Design/Logic Flaw

ngiflib commit fb271 was discovered to contain a segmentation violation via the function "main" at gif2tag.c. This vulnerability is triggered when running the program gif2tga...

Design/Logic Flaw

ngiflib commit 84a75 was discovered to contain a segmentation violation via the function SDLLoadAnimatedGif at ngiflibSDL.c. This vulnerability is triggered when running the program SDLaffgif...

CVE-2023-39113

ngiflib commit fb271 was discovered to contain a segmentation violation via the function "main" at gif2tag.c. This vulnerability is triggered when running the program gif2tga...

CVE-2023-39114

CVE-2023-39114 affects ngiflib (commit 84a75) with a segmentation violation in SDL_LoadAnimatedGif inside ngiflibSDL.c when running SDLaffgif. Documented impact: MEDIUM severity (CVSS v3.1: 5.5) with local attack vector, no privileges required, user interaction needed, and availability impact rat...

CVE-2023-39113

CVE-2023-39113 affects ngiflib (a C library for decoding GIFs). The vulnerability is a segmentation fault in the main function of gif2tag.c, triggered when running the gif2tga tool. Documented impact indicates a segmentation fault (availability impact) but does not provide exploitable vectors, af...

CVE-2023-39114

ngiflib commit 84a75 was discovered to contain a segmentation violation via the function SDLLoadAnimatedGif at ngiflibSDL.c. This vulnerability is triggered when running the program SDLaffgif...

CVE-2023-39114

ngiflib commit 84a75 was discovered to contain a segmentation violation via the function SDLLoadAnimatedGif at ngiflibSDL.c. This vulnerability is triggered when running the program SDLaffgif...