Sleicasper

The issue is a heap-based buffer over-read in libdwarf, related to the `dwarf global formref b` function.

The issue is related to a NULL pointer dereference in the `Component::SubXOf` function located in `component.hpp`.

The issue is related to a NULL pointer dereference in the `LineBuffer::FetchRegion` function located in `linebuffer.cpp`.

The issue is a heap-based buffer over-read in the HierarchicalBitmapRequester::FetchRegion function, located in hierarchicalbitmaprequester.cpp. This occurs because the MCU size can differ between allocation and use, leading to potential memory access issues.

The issue is related to a stack buffer overflow in the `LibRaw::identify process dng fields` function within the `identify.cpp` component of the Libraw image processing library. This overflow can be exploited by a remote attacker to gain access to confidential data, compromise data integrity, and cause a denial of service.

The issue arises from a heap-based buffer overflow in the MmsValue decodeMmsData function when parsing the MMS BIT STRING data type. This occurs in the mms/iso mms/server/mms access result.c file of libIEC61850.

A use-after-free issue exists in the hash slice function located in mrbgems/mruby-hash-ext/src/hash-ext.c.

A stack-based buffer overflow issue exists in the mrb str len to dbl function within string.c.

A use-after-free issue exists in the hash values at function located in mrbgems/mruby-hash-ext/src/hash-ext.c.

The issue is related to an assertion failure in the `stbtt cff get index` function.

The issue is related to an assertion failure in the `stbtt buf seek` function.

The issue is related to a heap-based buffer over-read in the `stbtt buf get8` function.

The issue is related to a heap-based buffer over-read in the `ttUSHORT` function.

The issue is related to a heap-based buffer over-read in the `stbtt buf peek8` function.

The issue is related to an integer overflow in the `sixel frame resize` function within the `frame.c` file.

The issue is related to an integer signedness problem in the StringUtils createStringFromBuffer function, located in common/string utilities.c. This could potentially lead to an attempted excessive memory allocation, resulting in a denial of service.

The issue is related to an out-of-bounds read, specifically in the getNumberOfElements function within the mms access result.c file. This is connected to the variables bufPos and elementLength.

The issue is related to an integer signedness error in the MmsValue newOctetString function, located in the mms/iso mms/common/mms value.c file. This error can lead to an attempted excessive memory allocation.

The issue is related to an out-of-bounds read in the BerDecoder decodeUint32 function, located in the mms/asn1/ber decode.c file. This is due to the handling of `intLen` and `bufPos` variables.

The issue is related to a heap-based buffer overflow in the MmsValue decodeMmsData function, located in the mms/iso mms/server/mms access result.c file.