Linhlhq

A state confusion issue exists in the `g dbus node info new for xml()` function within the gio/gdbusintrospection.c file. This occurs when the software processes malformed D-Bus introspection XML, specifically when a `<node>` element is nested inside other elements such as `<method>`, `<signal>`, `<property>`, or `<arg>`. This flaw can trigger an unsigned integer overflow, leading to an out-of-bounds read and resulting in a denial of service.

A buffer over-read occurs in the `g io channel read line backend()` function within the giochannel.c file. This happens when a custom line terminator with a length greater than one is configured, leading the `memcmp` function to read beyond the GString buffer. This issue can result in a minor information disclosure of 7 bytes or a denial of service if the over-read crosses a page boundary.

An out-of-bounds read of 2 bytes can occur in the `g date time get ymd()` function within the glib/gdatetime.c file. This happens when the system processes an invalid GDateTime object created by the `g date time add full()` function. This issue can corrupt date output and cause logic errors, potentially resulting in a denial of service.

An off-by-one error exists in the `gvs tuple is normal()` function within the glib/gvariant-serialiser.c file. The issue occurs during an alignment padding check where the bounds check incorrectly uses the `>` operator instead of `>=`, leading to an out-of-bounds read of a single byte. This can result in a minor information disclosure of one byte or a denial of service if the read operation crosses a page boundary.

The issue is related to an elevation-of-privilege vulnerability in the Windows Hyper-V system, which is caused by flaws in the authorization procedure. This vulnerability can be exploited to allow an attacker to elevate their privileges.

The issue is related to an elevation-of-privilege vulnerability in the Storage Spaces Controller, which is associated with insufficient access restrictions. This vulnerability can be exploited to allow an attacker to elevate their privileges.

The issue is related to insufficient input validation in Microsoft Office, Microsoft Word, and Microsoft 365 Apps for Enterprise, allowing an attacker to execute arbitrary code. This can be exploited by remote attackers, potentially affecting the system.

The issue is related to incorrect code generation management in the HEVC Video Extensions codec. Exploitation of this issue may allow an attacker to execute arbitrary code.

The issue is related to incorrect code generation management in the application. It may allow a remote attacker to execute arbitrary code.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in GNU LibreDWG. The problem is related to the bit search sentinel function in the bits.c file. Recommendations: For GNU LibreDWG version 0.10, consider updating to a newer version that contains a fix for this issue, if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists, which can be triggered via the `read 2004 compressed section` function in the `decode.c` file. Recommendations: For GNU LibreDWG version 0.10, consider applying a patch or fix that addresses the heap-based buffer overflow in the `read 2004 compressed section` function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in the software. The problem is located in the bit calc CRC function in the bits.c file. Recommendations: For GNU LibreDWG version 0.10, at the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists due to a problem in the `read 2004 section handles` function located in `decode.c` at line 2637. This could potentially lead to exploitation. Recommendations: For GNU LibreDWG version 0.10, consider restricting access to the `read 2004 section handles` function in `decode.c` until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: An issue in GNU LibreDWG leads to a memory leak when crafted input is processed by the dwg decode eed function in the decode.c file. Recommendations: For GNU LibreDWG version 0.10, at the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in the read 2004 section appinfo function, located in the decode.c file. This issue can be exploited via the read 2004 section appinfo function. Recommendations: For GNU LibreDWG version 0.10, consider applying a patch or fix to address the heap-based buffer overflow issue in the read 2004 section appinfo function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists via the `bit read B` function in the `bits.c` file. This could potentially allow for exploitation. Recommendations: For GNU LibreDWG version 0.10, consider restricting access to the `bit read B` function in the `bits.c` file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A null pointer dereference issue exists in GNU LibreDWG. This issue is related to the get bmp function in the dwgbmp.c file. Recommendations: For GNU LibreDWG version 0.10, consider avoiding the use of the get bmp function until a patch is available. As a temporary workaround, review the code in dwgbmp.c to identify and mitigate potential null pointer dereferences. At the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A null pointer dereference issue exists, which causes a denial of service, resulting in an application crash. The issue is related to the `htmlescape` function in the `escape.c` file. Recommendations: For GNU LibreDWG version 0.10.2641, consider applying a patch to fix the null pointer dereference issue in the `htmlescape` function to prevent application crashes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists. The problem is located in the `escape.c` file at line 51, specifically via `htmlescape`. Recommendations: For GNU LibreDWG version 0.10.2641, consider restricting access to the `htmlescape` function in `escape.c` until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A null pointer dereference issue exists in the software. The issue is related to the `read 2004 compressed section` function in the `decode.c` file. Recommendations: For GNU LibreDWG version 0.10, consider avoiding the use of the `read 2004 compressed section` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.