Van-Thuan Pham

A mismatch between encoding lists in Oniguruma and mbfl leads to a NULL pointer dereference, which results in a segmentation fault and denial of service. This occurs when user-controlled input influences the encoding passed to the `mb regex encoding()` function.

The issue is related to a stack-based buffer overflow in the `xmlSnprintfElementContent` function in `valid.c`. This function is supposed to recursively dump the element content definition into a char buffer `buf` of size `size`. However, at the end of the routine, it may concatenate two more characters without checking whether the current `strlen(buf) + 2 < size`. This can cause programs that use libxml2, such as PHP, to crash. The vulnerability is associated with a buffer overflow in memory, which can be exploited by a remote attacker to cause a denial of service.

The Binary File Descriptor library is prone to a global buffer over-read error due to an incorrect assumption about the naming of SHT REL/SHR RELA sections. This issue affects programs that analyze binary programs using the library, such as objcopy and strip, causing them to crash.

The Binary File Descriptor library is prone to an invalid read of size 4 due to NULL pointer dereferencing of ` bfd elf large com section`. This issue causes programs that analyze binary programs using the libbfd library, such as objcopy, to crash.

The Binary File Descriptor (BFD) library is vulnerable due to a missing malloc() return-value check in the bfd generic get section contents function, causing an invalid write of size 8. This issue affects programs that analyze binary programs using the libbfd library, such as objcopy, leading to crashes.

The Binary File Descriptor library is susceptible to an invalid read due to inadequate reloc offset range tests, which failed to account for small negative offsets. This issue can cause programs utilizing the library, such as objdump, to crash when analyzing binary programs.

The issue is related to a heap-based buffer over-read in the Binary File Descriptor (BFD) library, specifically in the aout link add symbols function. This occurs due to an incomplete check for invalid string offsets while loading symbols, which can lead to a crash of the GNU linker (ld) program.

The Binary File Descriptor library has a function in bfd/aoutx.h that is prone to an invalid read due to missing checks for unrecognized relocs, causing utilities like strip to crash.

The Binary File Descriptor library is susceptible to an invalid read due to a missing check for null headers in the find link function. This issue can cause utilities like strip to crash.

The issue is caused by an invalid read in the Binary File Descriptor (BFD) library due to a missing check for an invalid sh link field. This results in Binutils utilities, such as strip, crashing.

The GNU assembler in GNU Binutils is susceptible to a global buffer overflow of size 1 when trying to unget an EOF character from the input stream. This could potentially cause a program crash.

The issue is related to a heap-based buffer overflow in the GNU linker (ld) when processing a malformed input script. This occurs due to the lack of '0' termination of a name field in ldlex.l, leading to a program crash.