CVE-2021-33293

CVE-2021-33293 affects Panorama Tools libpano13, where an out-of-bounds read in panoParserFindOLine() (parser.c) is triggered by version 2.9.20. Connected advisories confirm this vulnerability and document patches across distros: Debian fixed to 2.9.19+dfsg-2+deb9u2; openSUSE/SUSE and Ubuntu advi...

CVE-2021-20307

CVE-2021-20307 affects libpano13, specifically the panoFileOutputNamesCreate() formatter path in versions up to 2.9.20 (rc2 and earlier). The vulnerability is a format string issue that can lead to reading and writing arbitrary memory values, with potential for remote memory disclosure and, per t...

CVE-2021-33798

CVE-2021-33798 involves the libpano13 library (version 2.9.20). A null pointer dereference in the parsing path (panoParserFindOLine in parser.c) can cause a denial of service and potentially code execution when processing a crafted file. The connected documents provide confirmed impact but do not...