Jerrygw

A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this vulnerability is the function matmul transb of the file src/layer/matmul.cpp of the component MatMul. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this issue is the function ncnn::yuv420sp2rgb of the file src/mat pixel.cpp of the component Conversion API. The manipulation results in integer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

**اسم البرنامج المصاب والإصدارات المتأثرة** Kamailio الإصدارات السابقة لـ 6.0.8 Kamailio الإصدارات السابقة لـ 6.1.4 **Description** يوجد تجاوز لسعة المخزن المؤقت (buffer overflow) عن بُعد في وحدة sipt ضمن الدالة `isup get calling party()` الموجودة في الملف src/modules/sipt/ss7 parser.c. تحدث هذه المشكلة عند التلاعب بطول الوسيط، مما يسمح لمهاجم عن بُعد بالتسبب في هذا التجاوز. **Recommendations** التحديث إلى الإصدار 6.0.8. التحديث إلى الإصدار 6.1.4.

**Name of the Vulnerable Software and Affected Versions** Nothings stb versions prior to 2c980bb59875b0d32144a71867fbdebb2f77cd20 **Description** An integer overflow occurs in the `hexwave init()` function within the `stb hexwave.h` library when the `width`/`oversample` argument is manipulated. This flaw allows for remote exploitation. **Recommendations** As a temporary workaround, restrict the use of the `hexwave init()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Nothings stb versions prior to 1.17 **Description** A flaw in the Image Encoding component of the `stb image write.h` library allows for a remote attack. The issue resides in the `stbi write png to mem()`, `stbi write jpg core()`, and `stbi write tga core()` functions, where a manipulation can lead to an integer overflow, a condition where an arithmetic operation results in a value that exceeds the storage capacity of the integer type. **Recommendations** Update Nothings stb to version 1.17 or later. As a temporary workaround, restrict the use of the `stbi write png to mem()`, `stbi write jpg core()`, and `stbi write tga core()` functions.

**Name of the Vulnerable Software and Affected Versions** GPAC version 26.07.0 **Description** A heap-based buffer overflow exists in the WebSocket Handler component within the `rmt client handle ws frame()` function of the `src/utils/rmt ws.c` file. This issue can be triggered remotely by manipulating the `payload size` argument. **Recommendations** Update to version abi-16.26.