Kky0Ho

A heap-based buffer over-read issue exists in the ReadMCHAR function in lib/dwg/io.cpp, which can cause an application crash.

A heap-based buffer over-read issue exists in the ReadCHAR function in lib/dwg/io.cpp, which can cause an application crash.

A memory leak was found in the `pg query raw parse` function within `pg query parse.c`, potentially leading to a denial of service.

A denial of service issue was found, related to the use of an invalid memory address in the `LZ5 compress continue` function in `lz5 compress.c`, specifically with `LZ5 compress fastSmall` and `MEM read32`. This issue causes a segmentation fault and application crash.

Name of the Vulnerable Software and Affected Versions: ZZIPlib versions prior to 0.13.70 Description: The issue is related to a memory leak in the ` zzip parse root directory` function, which can lead to a denial of service attack. This is caused by a resource not being released after its valid lifetime has expired. A remote attacker can exploit this issue to cause a denial of service. Recommendations: For ZZIPlib versions prior to 0.13.70, update to version 0.13.70 or later to resolve the issue. As a temporary workaround, consider restricting access to the ` zzip parse root directory` function in zip.c to minimize the risk of exploitation.