CVE-2018-20348

The CVE-2018-20348 entry documents a local-denial-of-service vulnerability in libpff: specifically, libpff_item_tree_create_node in libpff_item_tree.c (before experimental-20180714) can be triggered by a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c. Exploitation would ...

CVE-2020-18897

CVE-2020-18897 is a use-after-free vulnerability in the libpff_item_tree_create_node function of libyal Libpff before 20180623. The flaw allows a crafted pff file to cause denial of service or execute arbitrary code. The provided documents identify the affected component and the underlying cause ...

CVE-2018-11723

The vulnerability CVE-2018-11723 affects libyal libpff (libpff_name_to_id_map_entry_read in libpff_name_to_id_map.c) through 2018-04-28. It allows a remote attacker to cause information disclosure via a crafted PFF file by triggering a heap-based buffer over-read. Public entries (SUSE, CNVD, OSV,...