Ech06

A weakness in the `elf link add object symbols()` function within the bfd/elflink.c file allows a local attacker to cause a null pointer dereference, which occurs when a program attempts to read or write to a memory address that is null, typically resulting in a crash.

A null pointer dereference occurs in the ELF Section Handler component within the `elf x86 64 common section index()` function of the `bfd/elf64-x86-64.c` file. This issue requires local access to be exploited.

A null pointer dereference occurs in the Dynamic Relocation Allocation component within the `elf x86 allocate dynrelocs()` function of the `bfd/elfxx-x86.c` file. This issue can be triggered via a local approach.

A flaw in the Eh Frame Handler component of the software allows a local attacker to cause a null pointer dereference, which occurs when the system attempts to read or write to a memory address that is null, typically leading to a program crash. This issue is located within the ` bfd elf eh frame section offset()` function in the `bfd/elf-eh-frame.c` file.

A use after free issue exists in the MP4Box component within the `gf node get name()` function of the `scenegraph/base scenegraph.c` file. This flaw allows a remote attacker to trigger the condition through specific manipulation.

A use after free issue exists in the MP4Box component within the `gf sg script load()` function of the scenegraph/vrml tools.c file. This flaw allows a remote attacker to trigger the condition through specific manipulation. Use after free is a memory corruption flaw where an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

A remote flaw exists in the MP4Box component within the `gf node list get child()` function of the `scenegraph/base scenegraph.c` file. Manipulation of the `Target` argument leads to a null pointer dereference, which occurs when a program attempts to read or write to a memory address that is null, typically resulting in a crash.

A remote memory corruption issue exists within the MP4Box component. The flaw is located in the `gf bt report()` function of the `scene manager/loader bt.c` file, where specific manipulation can lead to memory corruption.

A use after free issue exists in the MP4Box component within the `gf node changed internal()` function of the `scenegraph/base scenegraph.c` file. This flaw allows a remote attacker to trigger the condition through specific manipulation. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

A remote attack can trigger a use after free condition within the MP4Box component. This occurs during the execution of the `gf node unregister()` function located in the scenegraph/base scenegraph.c file. Use after free is a memory corruption issue where an application continues to use a pointer after it has been freed, potentially leading to crashes or arbitrary code execution.

يحدث تجاوز سعة المخزن المؤقت (buffer overflow) القائم على الـ«هيوب» (heap) في مكون معالج صور BMP ضمن الدالة `dwg bmp()` الموجودة في الملف src/dwg.c. يتطلب استغلال هذه الثغرة وصولاً محليًّا.

يحدث تجاوز سعة المخزن المؤقت (buffer overflow) القائم على الـ heap في مكون فك ضغط القسم R2004 داخل الدالة `decompress R2004 section()` الموجودة في الملف src/decode.c. يمكن إثارة هذه المشكلة من خلال الوصول المحلي عن طريق تنفيذ عملية تلاعب محددة.

تحدث عملية إزالة مرجعية مؤشر فارغ في مكون معالج ملفات DWG عند التلاعب بالمعلمة `next obj` داخل الدالة `dwg next entity()` الموجودة في الملف src/dwg.c. تتطلب هذه المشكلة أن يتم شن الهجوم من موقع محلي.