92Wyunchao

The issue is related to a heap buffer overflow vulnerability in the `FilePOSIX::read` function in `File.cpp`. This can cause a denial-of-service when a crafted wav file is used, and the bug can be triggered by the executable `sfconvert`.

An issue was discovered in the function `zzip disk entry to file header` in `mmapped.c`, which will lead to a denial-of-service.

The issue is related to a float point exception in the printLong function in tags int.cpp, which can be exploited by attackers to cause a denial of service (DOS) via a crafted tif file. This is due to a lack of division by zero checking, allowing a remote attacker to disrupt service using a specially crafted file.

The issue is related to an invalid memory access in the `decode` function of the `iptc.cpp` component in the Exiv2 library, which can lead to a buffer overflow. This allows a remote attacker to cause a denial of service (DOS) by using a specially crafted tif file.

The issue is related to a global buffer over-read in the `Exiv2::Internal::Nikon1MakerNote::print0x0088` function in `nikonmn int.cpp`, which can result in an information leak. This can allow a remote attacker to access confidential data and potentially cause a denial of service.

The issue allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file. This is due to the `unzzip cat` function in the bins/unzzipcat-mem.c file.

The issue is related to an invalid memory read bug in the AP4 SampleDescription::GetType() function in Ap4SampleDescription.h. This can be exploited by attackers to cause a denial-of-service via a crafted mp4 file, which can be triggered by the executable mp42ts.

The issue is related to an invalid memory read bug in the `AP4 SampleDescription::GetFormat()` function in `Ap4SampleDescription.h`. This can be exploited by attackers to cause a denial-of-service via a crafted mp4 file, which can be triggered by the executable `mp42ts`.

The issue is related to a NULL pointer dereference vulnerability in the AP4 JsonInspector::AddField function in Ap4Atom.cpp. This can be exploited by attackers to cause a denial-of-service via a crafted mp4 file, which can be triggered by the executable mp4dump.

The issue is related to a NULL pointer dereference bug in the `ModuleState::setup` function, located in `modules/ModuleState.cpp`. This bug can be exploited by an attacker to cause a denial of service using a crafted caf file. An example of such exploitation is demonstrated by the sfconvert tool.