Search vulnerabilities

Results 16,509

Export CSV
CVE-2020-21814

A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlwescape ../../programs/escape.c:97.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Gnu
Products
CVE-2020-21813

A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
CVE-2020-21724

Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Products
CVE-2020-21723

A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause a denial of service (crash) via opening of crafted ogg file.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Products
CVE-2020-21687

nasm: stack-based buffer overflow in stdscan() in stdscan.c

Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2020-21685

nasm: Heap buffer overflow in hash_findi() in hashtbl.c

Buffer Overflow vulnerability in hash_findi function in hashtbl.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2020-21680

transfig: A stack-based buffer overflow in the put_arrow() component in genpict2e.c could result in a denial of service

A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2020-21679

Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2020-21676

transfig: A stack-based buffer overflow in the genpstrx_text() component in genpstricks.c could result in a denial of service

A stack-based buffer overflow in the genpstrx_text() component in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pstricks format.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
CVE-2020-21675

transfig: A stack-based buffer overflow in the genptk_text component in genptk.c could result in a denial of service

A stack-based buffer overflow in the genptk_text component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ptk format.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
CVE-2020-21674

libarchive: heap-based buffer overflow in archive_string_append_from_wcs function in archive_string.c

Heap-based buffer overflow in archive_string_append_from_wcs() (archive_string.c) in libarchive-3.4.1dev allows remote attackers to cause a denial of service (out-of-bounds write in heap memory resulting into a crash) via a crafted archive file. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Products
CVE-2020-21606

libde265 v1.0.4 contains a heap buffer overflow fault in the put_epel_16_fallback function, which can be exploited via a crafted a file.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2020-21604

libde265 v1.0.4 contains a heap buffer overflow fault in the _mm_loadl_epi64 function, which can be exploited via a crafted a file.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2020-21603

libde265 v1.0.4 contains a heap buffer overflow in the put_qpel_0_0_fallback_16 function, which can be exploited via a crafted a file.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2020-21602

libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_bipred_16_fallback function, which can be exploited via a crafted a file.

CVSS 3.1 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2020-21601

libde265 v1.0.4 contains a stack buffer overflow in the put_qpel_fallback function, which can be exploited via a crafted a file.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2020-21600

libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_pred_avg_16_fallback function, which can be exploited via a crafted a file.

CVSS 3.1 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2020-21599

libde265 v1.0.4 contains a heap buffer overflow in the de265_image::available_zscan function, which can be exploited via a crafted a file.

CVSS 3.1 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
CVE-2020-21598

libde265 v1.0.4 contains a heap buffer overflow in the ff_hevc_put_unweighted_pred_8_sse function, which can be exploited via a crafted a file.

CVSS 3.1 · 8.8 High EPSS 1.8% KEV · Not listed
Vendors