FFmpeg buffer overflow vulnerability (CNVD-2021-39533)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in the convolutiony10bit function in libavfilter/vfvmafmotion.c in FFmpeg version 4.2. An attacker can...

FFmpeg buffer overflow vulnerability (CNVD-2021-39532)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in the builddiffmap function in libavfilter/vffieldmatch.c in FFmpeg version 4.2. An attacker can exploit...

FFmpeg buffer overflow vulnerability (CNVD-2021-39537)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in filtervertically8 in libavfilter/vfavgblur.c in FFmpeg version 4.2. An attacker can exploit this...

FFmpeg Buffer Overflow Vulnerability (CNVD-2021-39535)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in the lagfunframe16 function in libavfilter/vflagfun.c in FFmpeg version 4.2. An attacker can exploit this...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The vulnerability exists due to a buffer overflow in the abstboxread function in MP4Box in GPAC...

FFmpeg buffer overflow vulnerability (CNVD-2021-37145)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in FFmpeg version 4.1. A remote attacker can exploit this vulnerability to cause a denial of service via...

Denial Of Service (DoS)

openexr is vulnerable to denial of service. The vulnerability exists due to Heap-buffer-overflow in Imf25::copyIntoFrameBuffer...

Samba Buffer Overflow Vulnerability

Samba is a set of free software from the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The program supports sharing printers, transferring data files to each other, and so on. A buffer overflow vulnerabili...

CVE-2021-31872

An issue was discovered in klibc before 2.0.9. Multiple possible integer overflows in the cpio command on 32-bit systems may result in a buffer overflow or other security impact...

The vulnerability of the Easy Virtual Switching System (VSS) software, developed by Cisco IOS XE, affects Cisco Catalyst 4500 and Cisco Catalyst 4500-X network devices. This vulnerability allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the Easy Virtual Switching System VSS microprogramming software for Cisco IOS XE network devices from the Cisco Catalyst 4500 series and Cisco Catalyst 4500-X series is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or...

GStreamer Buffer Overflow Vulnerability (CNVD-2021-31669)

GStreamer is an open source multimedia framework library . Use it to build a range of media processing modules , including from simple ogg playback functions to complex audio mixing and video non-linear editing processing . A buffer overflow vulnerability exists in GStreamer versions prior to...

FFmpeg buffer overflow vulnerability (CNVD-2021-28376)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in libavcodec in FFmpeg 4.3 and earlier versions. An attacker could exploit this vulnerability via speciall...

FFmpeg Buffer Overflow Vulnerability (CNVD-2021-25376)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in the sniffchannelorder function in aacdectemplate.c in FFmpeg 3.1.2. An attacker can exploit this...

grub2 buffer overflow vulnerability (CNVD-2021-16927)

grub2 is a Linux system boot program from the GNU community. A security vulnerability exists in grub2 versions prior to 2.06 which identifies a stack buffer overflow vulnerability in grubparsersplitcmdline. No details of the vulnerability are provided at this time...

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. The vulnerability exists in net/wireless/nl80211.c as it does not check the length of variable elements in a beacon head, leading to a buffer overflow...

Adobe Photoshop Buffer Overflow Vulnerability (CNVD-2021-11020)

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Photoshop. An attacker could exploit this vulnerability to execute arbitrary code...

Denial Of Service (DoS)

github.com/go-gitea/gitea is vulnerable to denial of service DoS. The vulnerability exists through a stack buffer overflow that occurs from the usage of filepath...

PT-2021-2441

Name of the Vulnerable Software and Affected Versions: Python versions 3.x through 3.9.1 Description: The issue is related to a buffer overflow in the PyCArg repr function in ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbe...

Denial Of Service (DoS)

OpenJPEG is vulnerable to denial of service. A heap-based buffer overflow in opjt1clbldecodeprocessor in openjp2/t1.c due to lack of opjj2kupdateimagedimensions validation allows an attacker to crash the application...

Buffer Overflow Vulnerability in Cisco RV110W Products (CNVD-2021-05424)

The Cisco RV110W Wireless-N VPN Firewall is an enterprise-class router from Cisco USA. The Cisco RV110W product suffers from a buffer overflow vulnerability that originates from a program's failure to properly validate user data, which can be exploited by a remote attacker to execute arbitrary co...