Traceprobe

The issue is related to a use-after-free in the `lzma decompress buf` function of `stream.c`, allowing remote attackers to cause a denial of service, such as an application crash, or possibly have other unspecified impacts.

Name of the Vulnerable Software and Affected Versions: MuPDF version 1.13.0 Description: The issue is related to an infinite loop in the `fz skip space` function of the pdf/pdf-xref.c file. This could allow a remote adversary to cause a denial of service via a crafted pdf file. Recommendations: For MuPDF version 1.13.0, consider disabling the `fz skip space` function as a temporary workaround until a patch is available.

Name of the Vulnerable Software and Affected Versions: radare2 version 2.5.0 Description: The issue is a heap-based buffer over-read in the `dalvik op` function, located in `libr/anal/p/anal dalvik.c`. This can be exploited by remote attackers to cause a denial of service using a crafted DEX file. Recommendations: For radare2 version 2.5.0, as a temporary workaround, consider disabling the `dalvik op` function until a patch is available.

Name of the Vulnerable Software and Affected Versions: radare2 version 2.5.0 Description: The issue is a heap-based buffer over-read in the `r hex bin2str` function, located in `libr/util/hex.c`. This could allow remote attackers to cause a denial of service by providing a crafted DEX file. Recommendations: For radare2 version 2.5.0, consider avoiding the use of crafted DEX files until a patch is available. As a temporary workaround, restrict the input to the `r hex bin2str` function to prevent potential exploitation.

The issue is related to excessive iteration in the `DecodeLabImage` and `EncodeLabImage` functions of the `coders/tiff.c` component. This allows a remote attacker to cause a denial of service using a specially crafted tiff file. The exploitation can result in a hang that lasts tens of minutes, even with a small proof-of-concept file.

The issue is related to a NULL pointer dereference in the `getInt` function of the `decompile.c` file. This could allow remote attackers to cause a denial of service by providing a crafted swf file.

The issue is related to an infinite loop in the `runzip fd` function of `runzip.c`. This could allow remote attackers to cause a denial of service by providing a crafted lrz file.

The issue is related to a use-after-free in the `decompileJUMP` function, located in the decompile.c file.

The issue is related to a use-after-free in the decompileSingleArgBuiltInFunctionCall function of decompile.c. This could allow remote attackers to cause a denial of service by providing a crafted swf file.

The issue is related to a use-after-free in the decompileGETVARIABLE function of decompile.c. This could allow remote attackers to cause a denial of service by providing a crafted swf file.

The issue is related to a use-after-free in the decompileDELETE function of decompile.c. This could allow remote attackers to cause a denial of service by providing a crafted swf file.

The issue is related to a use-after-free in the decompilePUSHPARAM function of decompile.c. This could allow remote attackers to cause a denial of service by providing a crafted swf file.

The issue is related to a use-after-free in the `decompileCALLFUNCTION` function of `decompile.c`. This could allow remote attackers to cause a denial of service by providing a crafted swf file.

The issue is a heap-based buffer over-read in the `dalvik op` function of `anal dalvik.c`. This could allow remote attackers to cause a denial of service by providing a crafted dex file.

The issue is a heap-based buffer over-read in the get ivar list t function of mach0 classes.c, which could allow remote attackers to cause a denial of service via a crafted Mach-O file.

The issue is a heap-based buffer over-read in the `r asm disassemble` function, which can be exploited by remote attackers to cause a denial of service. This can be achieved through a crafted dex file.