R1Ck9

A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function change info of the file webui.py. Executing a manipulation of the argument ckpt path can lead to code injection. The attack can be executed remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function load word2vec as vocab tensor of the file hanlp/utils/torch util.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function get class from dynamic module of the file examples/chat gradio no merge.py of the component Adapter Config. The manipulation of the argument base model name or path results in code injection. The attack may be performed from remote. The exploit has been made public and could be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. This affects the function hanlp.load of the file plugins/hanlp common/hanlp common/reflection.py of the component Model Config Loading. This manipulation of the argument classpath causes deserialization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was found in ESPnet up to 202610.post2. This affects the function build model of the file espnet3/publication/inference model.py of the component Inference Model Handler. The manipulation of the argument target results in deserialization. It is possible to launch the attack remotely. The exploit has been made public and could be used. The patch is identified as f217b24f06de55e332cab10231469d5890dbbe00. It is best practice to apply a patch to resolve this issue.

A vulnerability was detected in GPAC up to f1219cde. Affected is the function gf node unregister of the file scenegraph/base scenegraph.c of the component MP4Box. Performing a manipulation results in reachable assertion. Attacking locally is a requirement. The exploit is now public and may be used. Upgrading to version abi-16.23 is able to address this issue. The patch is named 49dee5cad329cfed310c1682703df7daa47df31a. It is advisable to upgrade the affected component. This is not a duplicate of CVE-2021-46237 or CVE-2021-46234.

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to abi-16.23 **Description** A null pointer dereference occurs within an unknown function in the `scenegraph/vrml tools.c` file of the MP4Box component. A null pointer dereference is a condition where a program attempts to read or write to a memory address that is null, typically resulting in a crash. This issue can be exploited by a local attacker. **Recommendations** Upgrade to version abi-16.23.

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to abi-16.23 **Description** A buffer over-read occurs in the MP4Box component within the `gf svg attributes copy()` function located in the scenegraph/svg attributes.c file. This issue is triggered by specific manipulation and requires local access to be exploited. **Recommendations** Update to version abi-16.23.

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to abi-16.23 **Description** A flaw exists in the MP4Box component within the `xmt parse element()` function of the `scene manager/loader xmt.c` file. A local attacker can perform a manipulation that triggers a reachable assertion, which is a check used during development to ensure the program state is valid, and if it fails, the program terminates. **Recommendations** Upgrade to version abi-16.23.

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to abi-16.23 **Description** A flaw exists in the MP4Box component within the `gf sm dump command list()` function of the `scene manager/scene dump.c` file. Local manipulation can trigger a reachable assertion, which is a check used during development to ensure the program state is valid, and if it fails, the program terminates. **Recommendations** Update to version abi-16.23. As a temporary workaround, restrict local access to the MP4Box component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to abi-16.23 **Description** A security flaw exists in the MP4Box component within the `stbl GetSampleInfos()` function of the `isomedia/stbl read.c` file. A local attacker can manipulate the system to trigger a reachable assertion, which is a check used during development to ensure the program state is valid, and causing it to fail when an unexpected condition occurs. **Recommendations** Upgrade to version abi-16.23.

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to abi-16.23 **Description** A null pointer dereference occurs in the MP4Box component within the `gf sg mfurl del()` function located in the scenegraph/vrml tools.c file. This issue requires local access to be exploited. **Recommendations** Upgrade to version abi-16.23.

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to abi-16.23 **Description** A null pointer dereference occurs in the MP4Box component within the `gf node list add child()` function located in the scenegraph/base scenegraph.c file. This issue can be triggered by a local attacker. **Recommendations** Upgrade to version abi-16.23.

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to abi-16.23 **Description** A heap-based buffer overflow occurs in the MP4Box component within the `gf node get field()` function located in the scenegraph/base scenegraph.c file. This issue can be triggered through specific manipulation and requires local access to be exploited. **Recommendations** Upgrade to version abi-16.23.

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to abi-16.23 **Description** A use after free flaw exists in the MP4Box component within the `gf list count()` function of the `utils/list.c` file. This issue allows for local execution of a manipulation that can lead to memory corruption. Use after free is a condition where a program continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution. **Recommendations** Upgrade to version abi-16.23.

**اسم البرنامج المعرض للخطر والإصدارات المتأثرة** إصدارات GNU libredwg الأقدم من 0.13.4.8161 **الوصف** يحدث تجاوز سعة المخزن المؤقت (buffer overflow) القائم على الـ«هيوب» (heap) في مكون الأداة المساعدة Dwgbmp ضمن الدالة `bit read RC()` في ملف bits.c. تتيح هذه الثغرة لمهاجم عن بُعد إحداث التجاوز من خلال تلاعب محدد. **التوصيات** قم بتطبيق التصحيح 8f03865f37f5d4ffd616fef802acc980be54d300 لحل المشكلة.