Giantbranch

A heap buffer overflow issue exists in the `r read le32` function.

A heap buffer overflow issue exists in the vax opfunction of radare2.

The issue is related to a use after free in the `r reg set value` function.

A heap buffer overflow issue exists in the `r sleb128` function.

The issue is related to a use after free in the `r reg get name idx` function.

A null pointer deference issue exists in the ` core anal fcn` function.

A null pointer dereference was found in Exiv2, which can be triggered when printing the metadata of a crafted image file. This can potentially be exploited by an attacker to cause a denial of service if they can trick the victim into running Exiv2 on a crafted image file. The bug is only triggered when printing the interpreted (translated) data, which requires an extra command line option (`-p t` or `-P t`).

A Denial of Service issue exists due to a wild address read in the `Get16u` function in `exif.c`, which can cause a segmentation fault via a crafted file.

A Heap-based Buffer Overflow issue exists, allowing for a Buffer Overflow via the `RemoveUnknownSections` function in `jpgfile.c`.

A Heap-based Buffer Overflow issue exists via the `RemoveSectionType` function in `jpgfile.c`.

An invalid memory address reference was discovered in the `elf lookup` function in `p lx elf.cpp` via a crafted Mach-O file.

A heap-based buffer over-read was discovered in the `invert pt dynamic` function in `p lx elf.cpp` via a crafted Mach-O file.

A heap-based buffer over-read was discovered in the `get le64` function in `bele.h` via a crafted Mach-O file.

A heap-based buffer over-read was discovered in the get le32 function in bele.h via a crafted Mach-O file.

A heap-based buffer over-read issue was discovered in the `acc ua get be32` function, located in the miniacc.h file, which can be exploited via a crafted Mach-O file.

A memory-related issue was found in the adjABS function within the p lx elf.cpp file of UPX, which can be triggered by a specially crafted Mach-O file.

A floating point exception was discovered in the `elf lookup` function in `p lx elf.cpp` via a crafted Mach-O file.

A heap buffer overflow read was discovered in the upx software, specifically due to an imperfect check in the `p lx elf.cpp` component. This issue can be exploited by a remote attacker to gain access to confidential data and potentially cause a denial of service.