92Wyunchao

The issue is related to a heap buffer overflow vulnerability in the `FilePOSIX::read` function in `File.cpp`. This can cause a denial-of-service when a crafted wav file is used, and the bug can be triggered by the executable `sfconvert`.

An issue was discovered in the function `zzip disk entry to file header` in `mmapped.c`, which will lead to a denial-of-service.

O problema está relacionado a uma exceção de ponto flutuante na função printLong no arquivo tags int.cpp, que pode ser explorada por invasores para causar uma negação de serviço (DOS) por meio de um arquivo TIF malicioso. Isso se deve à falta de verificação de divisão por zero, permitindo que um invasor remoto interrompa o serviço usando um arquivo especialmente criado.

The issue is related to an invalid memory access in the `decode` function of the `iptc.cpp` component in the Exiv2 library, which can lead to a buffer overflow. This allows a remote attacker to cause a denial of service (DOS) by using a specially crafted tif file.

The issue is related to a global buffer over-read in the `Exiv2::Internal::Nikon1MakerNote::print0x0088` function in `nikonmn int.cpp`, which can result in an information leak. This can allow a remote attacker to access confidential data and potentially cause a denial of service.

The issue allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file. This is due to the `unzzip cat` function in the bins/unzzipcat-mem.c file.

The issue is related to an invalid memory read bug in the AP4 SampleDescription::GetType() function in Ap4SampleDescription.h. This can be exploited by attackers to cause a denial-of-service via a crafted mp4 file, which can be triggered by the executable mp42ts.

The issue is related to an invalid memory read bug in the `AP4 SampleDescription::GetFormat()` function in `Ap4SampleDescription.h`. This can be exploited by attackers to cause a denial-of-service via a crafted mp4 file, which can be triggered by the executable `mp42ts`.

The issue is related to a NULL pointer dereference vulnerability in the AP4 JsonInspector::AddField function in Ap4Atom.cpp. This can be exploited by attackers to cause a denial-of-service via a crafted mp4 file, which can be triggered by the executable mp4dump.

The issue is related to a NULL pointer dereference bug in the `ModuleState::setup` function, located in `modules/ModuleState.cpp`. This bug can be exploited by an attacker to cause a denial of service using a crafted caf file. An example of such exploitation is demonstrated by the sfconvert tool.