Cuanduo

**Name of the Vulnerable Software and Affected Versions** Ming (aka libming) version 0.4.8 **Description** The issue is a heap-based buffer over-read, specifically 2 bytes, occurring in the `decompileIF()` function located in `decompile.c`. **Recommendations** For Ming (aka libming) version 0.4.8, consider disabling the `decompileIF()` function as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Ming (aka libming) version 0.4.8 **Description** The issue is related to a NULL pointer dereference in the function `decompileGETURL2()` in `decompile.c`. **Recommendations** For Ming (aka libming) version 0.4.8, consider avoiding the use of the `decompileGETURL2()` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** ngiflib version 0.4 **Description** The issue is a heap-based buffer over-read in the GifIndexToTrueColor function located in ngiflib.c. **Recommendations** For ngiflib version 0.4, consider applying a patch or fix to address the heap-based buffer over-read issue in the GifIndexToTrueColor function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Exiv2 version 0.27.99.0 **Description** The issue is a heap-based buffer over-read in the `Exiv2::RafImage::readMetadata()` function, located in the rafimage.cpp file. **Recommendations** For Exiv2 version 0.27.99.0, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Free Lossless Image Format (FLIF) version 0.3 **Description** An issue was discovered in the image save png function in image/image-png.cpp, allowing attackers to trigger a heap-based buffer over-read in libpng via a crafted flif file. **Recommendations** For Free Lossless Image Format (FLIF) version 0.3, consider avoiding the use of the image save png function until a patch is available. As a temporary workaround, restrict the processing of crafted flif files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Exiv2 version 0.27.99.0 **Description** The issue is related to an out-of-bounds read in the `Exiv2::MrwImage::readMetadata()` function in `mrwimage.cpp`. This could result in a denial of service. The vulnerability can be exploited by a remote attacker using a specially crafted file, potentially leading to a denial of service. **Recommendations** For Exiv2 version 0.27.99.0, consider disabling the `readMetadata()` function as a temporary workaround until a patch is available. Restrict access to the `mrwimage.cpp` component to minimize the risk of exploitation. Avoid using the `Exiv2::MrwImage::readMetadata()` function with untrusted input files until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Exiv2 version 0.27.99.0 **Description** The issue is related to a heap-based buffer over-read in the `Exiv2::PngImage::readMetadata()` function, located in the `pngimage.cpp` component of the Exiv2 library. This can be exploited by attackers using a crafted image file, potentially leading to a denial of service. The vulnerability is associated with reading beyond the valid boundaries of a data buffer. **Recommendations** For Exiv2 version 0.27.99.0, consider disabling the `Exiv2::PngImage::readMetadata()` function as a temporary workaround until a patch is available. Restrict access to the `pngimage.cpp` component to minimize the risk of exploitation. Avoid using the affected library with untrusted image files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Audio File Library versions 0.3.6 **Description** The issue is related to a NULL pointer dereference bug in the `ulaw2linear buf` function in `G711.cpp` within the `libmodules.a` library. This bug allows an attacker to cause a denial of service via a crafted file. The exploitation of this bug can enable a remote attacker to disrupt service using a specially created file. **Recommendations** For Audio File Library version 0.3.6, consider disabling the `ulaw2linear buf` function in `G711.cpp` as a temporary workaround to minimize the risk of exploitation until a patch is available.