Wcventure

A heap-buffer-overflow issue exists in the `wasm::WasmBinaryBuilder::visitBlock(wasm::Block*)` function in `src/wasm/wasm-binary.cpp`. This can be triggered by a crafted wasm input, leading to a segmentation fault and resulting in denial-of-service. The issue is demonstrated by `wasm-opt`.

A NULL pointer dereference was discovered in `SExpressionWasmBuilder::makeBlock` in `wasm/wasm-s-parser.c`. A crafted wasm input can cause a segmentation fault, leading to denial-of-service.

The issue is related to a multiple concurrency use-after-free between the functions `zpaq decompress buf()` and `clear rulist()`. This allows attackers to cause a Denial of Service (DoS) via a crafted Irz file. The vulnerability is associated with parallel memory usage after release.

Name of the Vulnerable Software and Affected Versions: libexe versions prior to 20181128 Description: A heap-based buffer overflow in the `libexe io handle read coff optional header` function allows attackers to execute arbitrary code. Recommendations: For versions prior to 20181128, update to a version 20181128 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `libexe io handle read coff optional header` function until a patch is available.

The issue is related to an uncontrolled memory allocation in the `DataBufdata(subBox.length-sizeof(box))` function of the Exiv2 library, which can be exploited by a remote attacker to cause a denial of service (DOS) via a crafted input.

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the `parse statement` function, which allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Recommendations: For Cesanta MJS version 1.20.1, as a temporary workaround, consider disabling the `parse statement` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the `parse statement list` function, which allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Recommendations: For Cesanta MJS version 1.20.1, as a temporary workaround, consider disabling the `parse statement list` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Gama version 2.04 Description: A NULL-pointer deference issue was discovered in the `GNU gama::set()` function in `ellipsoid.h`, which can lead to a denial of service (DOS) via segment faults caused by crafted inputs. Recommendations: For Gama version 2.04, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the `parse block` function, which allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Recommendations: For Cesanta MJS version 1.20.1, as a temporary workaround, consider disabling the `parse block` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to a use-after-free in the reference function in parser.c.

The issue is related to a heap-based buffer over-read in the `nexttoken` function in `parser.c`.

A heap-based buffer over-read issue was found in the `wasm::SExpressionParser::skipWhitespace()` function in `wasm-s-parser.cpp`. This can be triggered by a crafted wasm input, potentially causing a segmentation fault and leading to denial-of-service.

An issue was discovered in the AP4 Array function, which can be triggered by crafted MP4 input, leading to an attempt at excessive memory allocation. This issue is related to a previously known problem.

A heap-based buffer over-read issue was found in the `wasm::WasmBinaryBuilder::visitCall` function in `wasm-binary.cpp`. This can be triggered by a crafted wasm input, potentially causing a segmentation fault and leading to denial-of-service.

The issue is a use-after-free problem in the `wasm::WasmBinaryBuilder::visitCall` function, located in `wasm-binary.cpp`. This could allow remote attackers to cause a denial-of-service via a wasm file.

An issue in Bento4 leads to an assertion failure in `AP4 AtomListWriter::Action` in `Core/Ap4Atom.cpp`, resulting in a denial of service where the program crashes. This issue can be demonstrated using `mp42hls`.

The issue is related to excessive memory allocation in the `wasm::WasmBinaryBuilder::readUserSection` function in `wasm-binary.cpp`. This can be triggered by tools such as `wasm-merge` and `wasm-opt`.

A NULL pointer dereference issue was found in the `wasm::SExpressionWasmBuilder::parseExpression` function in `wasm-s-parser.cpp`. This can be triggered by a crafted wasm input, resulting in a segmentation fault and leading to a denial-of-service condition.

A heap-based buffer over-read issue occurs in the `AP4 BitStream::WriteBytes` function in `Codecs/Ap4BitStream.cpp`, allowing remote attackers to cause an exception via crafted mp4 input. This leads to a denial of service.

An assertion failure was discovered in the `getType()` function in `wasm-binary.cpp`, which allows remote attackers to cause a denial of service via a crafted wasm file. This results in a failed assertion and crash.