CVE-2023-48298 Integer underflow leading to stack overflow in FPC codec decompression

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an...

CVE-2023-38427

An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemblenegcontexts...

Integer Underflow

openvswitch is vulnerable to integer underflow. The vulnerability exists in Organization Specific TLV which allows an attacker to cause an integer underflow...

OpenLDAP integer underflow vulnerability (CNVD-2021-06636)

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. An integer underflow vulnerability exists in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a slapd crash in Certificate Exact Assertion processing...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. The vulnerability exists through an integer underflow in MP4EIA608Convert in modules/demux/mp4/mp4.c...

CVE-2017-8906

CVE-2017-8906 describes an integer underflow in pixel-a.asm (planeClipAndMax) in MulticoreWare x265 up to version 2.4, as used by x265_encoder_encode in libbpg and other products. A small image can trigger the underflow, leading to a Denial of Service during encoding. The connected documents also...