Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a remote malicious user cause a Denial of Service.

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which might lead to memory corruption and other potential consequences.

A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might lead to memory corruption and other potential consequences.

Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, which could let a remote malicious user obtain sensitive information, cause a Denial of Service, or execute arbitrary code.

A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service (DOS) via a crafted avi file.

A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code.

transfig: A stack-based buffer overflow in the genpstrx_text() component in genpstricks.c could result in a denial of service

A stack-based buffer overflow in the genpstrx_text() component in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pstricks format.

transfig: A stack-based buffer overflow in the genptk_text component in genptk.c could result in a denial of service

A stack-based buffer overflow in the genptk_text component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ptk format.

libde265 v1.0.4 contains a heap buffer overflow in the de265_image::available_zscan function, which can be exploited via a crafted a file.

libde265 v1.0.4 contains a heap buffer overflow in the ff_hevc_put_unweighted_pred_8_sse function, which can be exploited via a crafted a file.

libde265 v1.0.4 contains a heap buffer overflow in the mc_chroma function, which can be exploited via a crafted a file.

libde265 v1.0.4 contains a global buffer overflow in the decode_CABAC_bit function, which can be exploited via a crafted a file.

transfig: segmentation fault in the gencgm_start() in gencgm.c

fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.

transfig: global buffer overflow in the get_line() in read.c

fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.

transfig: stack-based buffer overflow in the read_textobject() in read.c

fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.

transfig: global buffer overflow in the setfigfont() in genepic.c

fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.

transfig: global buffer overflow in conv_pattern_index() in gencgm.c

fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.

transfig: segmentation fault in the read_objects() in read.c

fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.

transfig: stack-based buffer overflow in bezier_spline() in genepic.c

fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations.