Edward-Lo

An issue was discovered in the gpmf-parser, where there is a heap-based buffer over-read in the GPMF parser.c file, specifically in the function GPMF Type.

Name of the Vulnerable Software and Affected Versions: GPAC version 0.7.1 Description: A heap-based buffer over-read issue was discovered in the urn Read function in isomedia/box code base.c. This issue is related to a buffer over-read vulnerability in the GPAC multimedia platform, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information. Recommendations: For GPAC version 0.7.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

A heap-based buffer over-read issue was discovered in the GPMF parser.c file, specifically in the `GPMF Validate()` function.

An issue was discovered in the function `GPMF Next` in GPMF parser.c, related to certain checks for `GPMF KEY END` and `nest level`, which can lead to a heap-based buffer over-read. This issue is not conditional on a `buffer size longs` check.

An issue was discovered in the gpmf-parser, where there is a heap-based buffer over-read in the GPMF parser.c file, specifically in the function GPMF Next. This issue is related to certain checks for a positive nest level.

An issue was discovered in the function GPMF Next, related to certain checks for `GPMF KEY END` and `nest level` (conditional on a `buffer size longs` check), which leads to a heap-based buffer over-read in GPMF parser.c.

The issue is caused by an infinite loop in the tinfl decompress function in miniz tinfl.c. This occurs because the `sym2` and `counter` variables can both remain equal to zero.

The issue is related to a NULL pointer dereference in the `md process line` function in md4c.c. This occurs due to `ctx->current block`.

The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault and application crash, or possibly have other unspecified impacts via a crafted file. This is due to the `md build attribute` function in `md4c.c`.

The issue is related to an infinite loop in the DecodeGifImg and LoadGif functions within the ngiflib.c file of MiniUPnP ngiflib.

The issue is related to a stack-based buffer overflow in the DecodeGifImg function of ngiflib.c.

The issue is related to a heap-based buffer over-read in the GifIndexToTrueColor function of the ngiflib.c file.

The issue is related to a Segmentation fault in the GifIndexToTrueColor function in ngiflib.c.

Name of the Vulnerable Software and Affected Versions: Liblouis version 3.5.0 Description: The issue is related to a buffer overflow on the stack in the `lou logPrint` function of the Liblouis translator. This can be exploited by a remote attacker to execute arbitrary code or cause a denial of service. Recommendations: For Liblouis version 3.5.0, consider disabling the `lou logPrint` function as a temporary workaround until a patch is available. Restrict access to the logging module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: LibRaw version 0.18.9 Description: An issue was discovered in the `utf2char` function in `libraw cxx.cpp`, which leads to a stack-based buffer overflow. Recommendations: For LibRaw version 0.18.9, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: LibRaw version 0.18.9 Description: An issue was discovered affecting the X3F property table list implementation in libraw x3f.cpp and libraw cxx.cpp, resulting in an out-of-bounds read. Recommendations: For LibRaw version 0.18.9, at the moment, there is no information about a newer version that contains a fix for this issue.