5346 matches found
Design/Logic Flaw
OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724...
CVE-2022-35065
OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724...
CVE-2022-35065
CVE-2022-35065 affects the OTFCC project (OpenType font tooling). The issue is a segmentation violation in /release-x64/otfccdump+0x65f724, indicating a fault in that path to process data. The CVSS metrics indicate an attacker-facing scenario with Network access, low complexity, no privileges, us...
CVE-2022-35065
OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724...
CVE-2022-35065
OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724...
CVE-2022-35065
OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724...
PT-2022-22546 · Otfcc +1 · Otfcc +1
Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A segmentation violation was discovered in OTFCC commit 617837b via the "/release-x64/otfccdump+0x65f724" endpoint. This issue affects the specified commit. Recommendations: For OTFCC commit 617837b, consider...
The vulnerability of the PVRDMA_CMD_CREATE_MR command in the QEMU hardware emulation software allows a hacker to trigger a service failure.
The vulnerability of the PVRDMACMDCREATEMR command in the QEMU hardware emulation software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to cause a system failure...
GSD-2022-1004966 USB: gadget: Fix obscure lockdep violation for udc_mutex
USB: gadget: Fix obscure lockdep violation for udcmutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...
mozjpeg DecompressScanlines::read_scanlines is Unsound
This issue and vector is similar to RUSTSEC-2020-0029 of rgb crate which mozjpeg depends on. Affected versions of mozjpeg crate allow creating instances of any type T from bytes, and do not correctly constrain T to the types for which it is safe to do so. Examples of safety violation possible for...
CVE-2022-30683
Adobe Experience Manager versions 6.5.13.0 and earlier is affected by a Violation of Secure Design Principles vulnerability that could lead to bypass the security feature of the encryption mechanism in the backend . An attacker could leverage this vulnerability to decrypt secrets, however, this i...
CVE-2020-23554
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e20...
CVE-2020-23552
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e62...
CVE-2020-23553
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33...
CVE-2020-23557
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptionsW+0x000000000000755d...
CVE-2020-23551
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e30...
CVE-2020-23560
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptionsW+0x000000000001bcab...
CVE-2020-23555
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e...