Browse CVEs

HIGH 8.8 CVE-2021-32298 An issue was discovered in libiff through 20190123. A global-buffer-overflow exists in the function IFF_errorId located in error.c. It allows an atta… Libiff after 20190123 Fix from $1,9502021-09-20 HIGH 7.8 CVE-2021-32299 An issue was discovered in pbrt through 20200627. A stack-buffer-overflow exists in the function pbrt::ParamSet::ParamSet() located in paramset.h. It… Pbrt after 20200627 Fix from $1,9502021-09-20 MEDIUM 6.5 CVE-2021-39518 An issue was discovered in libjpeg through 2020021. LineBuffer::FetchRegion() in linebuffer.cpp has a heap-based buffer overflow. Libjpeg after 2020021 Fix from $1,6002021-09-20 HIGH 8.8 CVE-2021-39522 An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2len() in bits.c has a heap-based buffer overflow. Libredwg after 0.10.1.3751 Fix from $1,9502021-09-20 HIGH 8.8 CVE-2021-39525 An issue was discovered in libredwg through v0.10.1.3751. bit_read_fixed() in bits.c has a heap-based buffer overflow. Libredwg after 0.10.1.3751 Fix from $1,9502021-09-20 HIGH 7.8 CVE-2021-32271 An issue was discovered in gpac through 20200801. A stack-buffer-overflow exists in the function DumpRawUIConfig located in odf_dump.c. It allows an … Gpac 1.0.1+ Fix from $1,9502021-09-20 HIGH 7.8 CVE-2021-32272 An issue was discovered in faad2 before 2.10.0. A heap-buffer-overflow exists in the function stszin located in mp4read.c. It allows an attacker to c… Debian Linux 2.10.0+ Fix from $1,9502021-09-20 HIGH 7.8 CVE-2021-32273 An issue was discovered in faad2 through 2.10.0. A stack-buffer-overflow exists in the function ftypin located in mp4read.c. It allows an attacker to… Debian Linux after 2.10.0 Fix from $1,9502021-09-20 HIGH 7.8 CVE-2021-32274 An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbr_qmf_synthesis_64 located in sbr_qmf.c. It allows a… Debian Linux after 2.10.0 Fix from $1,9502021-09-20 HIGH 7.8 CVE-2021-32277 An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbr_qmf_analysis_32 located in sbr_qmf.c. It allows an… Debian Linux after 2.10.0 Fix from $1,9502021-09-20 HIGH 7.8 CVE-2021-32278 An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function lt_prediction located in lt_predict.c. It allows an at… Debian Linux after 2.10.0 Fix from $1,9502021-09-20 HIGH 7.8 CVE-2021-32281 An issue was discovered in gravity through 0.8.1. A heap-buffer-overflow exists in the function gnode_function_add_upvalue located in gravity_ast.c. … Gravity after 0.8.1 Fix from $1,9502021-09-20 HIGH 7.8 CVE-2021-32286 An issue was discovered in hcxtools through 6.1.6. A global-buffer-overflow exists in the function pcapngoptionwalk located in hcxpcapngtool.c. It al… Hcxtoold after 6.1.6 Fix from $1,9502021-09-20 HIGH 7.8 CVE-2021-32287 An issue was discovered in heif through v3.6.2. A global-buffer-overflow exists in the function HevcDecoderConfigurationRecord::getPicWidth() located… Heif after 3.6.2 Fix from $1,9502021-09-20 HIGH 7.8 CVE-2021-32288 An issue was discovered in heif through v3.6.2. A global-buffer-overflow exists in the function HevcDecoderConfigurationRecord::getPicHeight() locate… Heif after 3.6.2 Fix from $1,9502021-09-20 HIGH 8.8 CVE-2021-32294 An issue was discovered in libgig through 20200507. A heap-buffer-overflow exists in the function RIFF::List::GetSubList located in RIFF.cpp. It allo… Libgig after 20200507 Fix from $1,9502021-09-20 HIGH 8.8 CVE-2021-32297 An issue was discovered in LIEF through 0.11.4. A heap-buffer-overflow exists in the function main located in pe_reader.c. It allows an attacker to c… Lief after 0.11.4 Fix from $1,9502021-09-20 HIGH 7.8 CVE-2021-32268 Buffer overflow vulnerability in function gf_fprintf in os_file.c in gpac before 1.0.1 allows attackers to execute arbitrary code. The fixed version … Gpac 1.0.1+ Fix from $1,9502021-09-20 HIGH 8.8 CVE-2020-21547 Libsixel 1.8.2 contains a heap-based buffer overflow in the dither_func_fs function in tosixel.c. Libsixel Patch available Fix from $1,9502021-09-17 HIGH 8.8 CVE-2020-21548 Libsixel 1.8.3 contains a heap-based buffer overflow in the sixel_encode_highcolor function in tosixel.c. Libsixel Patch available Fix from $1,9502021-09-17 MEDIUM 6.3 CVE-2021-39218 Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.26.0 and before version 0.30.0 is affected by a memory unsoundn… Wasmtime 0.30.0+ Fix from $1,6002021-09-17 HIGH 7.8 CVE-2021-38406 KEVEPSS 78% Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could … Dopsoft after 2.00.07 Fix from $1,9502021-09-17 MEDIUM 6.5 CVE-2020-21602 libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_bipred_16_fallback function, which can be exploited via a crafted a file. Libde265 No fix yet Fix from $1,6002021-09-16 MEDIUM 6.5 CVE-2020-21603 libde265 v1.0.4 contains a heap buffer overflow in the put_qpel_0_0_fallback_16 function, which can be exploited via a crafted a file. Libde265 No fix yet Fix from $1,6002021-09-16 MEDIUM 6.5 CVE-2020-21604 libde265 v1.0.4 contains a heap buffer overflow fault in the _mm_loadl_epi64 function, which can be exploited via a crafted a file. Libde265 No fix yet Fix from $1,6002021-09-16 MEDIUM 6.5 CVE-2020-21606 libde265 v1.0.4 contains a heap buffer overflow fault in the put_epel_16_fallback function, which can be exploited via a crafted a file. Libde265 No fix yet Fix from $1,6002021-09-16 MEDIUM 6.5 CVE-2020-21594 libde265 v1.0.4 contains a heap buffer overflow in the put_epel_hv_fallback function, which can be exploited via a crafted a file. Libde265 No fix yet Fix from $1,6002021-09-16 MEDIUM 6.5 CVE-2020-21595 libde265 v1.0.4 contains a heap buffer overflow in the mc_luma function, which can be exploited via a crafted a file. Libde265 No fix yet Fix from $1,6002021-09-16 MEDIUM 6.5 CVE-2020-21597 libde265 v1.0.4 contains a heap buffer overflow in the mc_chroma function, which can be exploited via a crafted a file. Debian Linux No fix yet Fix from $1,6002021-09-16 HIGH 8.8 CVE-2020-21598 libde265 v1.0.4 contains a heap buffer overflow in the ff_hevc_put_unweighted_pred_8_sse function, which can be exploited via a crafted a file. Debian Linux No fix yet Fix from $1,9502021-09-16