Xudong Cao

Name of the Vulnerable Software and Affected Versions: vim versions prior to 9.1.1616 Description: A security flaw exists in vim due to a buffer overflow in the `main` function of the `xxd.c` file within the `xxd` component. The vulnerability is locally exploitable. An exploit for this issue has been publicly released. Recommendations: Upgrade to version 9.1.1616.

Name of the Vulnerable Software and Affected Versions: vim version 9.1.0000 Description: A memory corruption issue exists in vim version 9.1.0000 due to the manipulation of the ` memmove avx unaligned erms` function within the `memmove-vec-unaligned-erms.S` file. The issue is exploitable locally. An exploit is publicly available. Some users report difficulty reproducing the issue when coloring is enabled. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A problematic issue exists in the `mp4decrypt` component, specifically within the `AP4 DataBuffer::SetDataSize` function of the `Mp4Decrypt.cpp` file. This issue leads to resource allocation. The attack can be launched remotely, but is considered difficult to exploit. The exploit has been publicly disclosed.

A vulnerability was found in GNU PSPP, affecting the `calloc` function in the `pspp-convert.c` file. The manipulation of the argument `-l` leads to integer overflow. Local access is required to approach this attack.

The issue allows attackers to cause a denial of service, resulting in an application exit, via crafted input data. This can be triggered by specific data that causes a call from the `src/data/dictionary.c` code into the `src/data/variable.c` code, leading to a `var set leave quiet` assertion failure.

A security issue has been identified in the `calc sleep time` function within the `send packets.c` file. Manipulation of this function can lead to a divide by zero error. Exploitation requires local access. The exploit has been publicly disclosed.

A problematic issue was found in GNU Bison affecting the ` obstack vprintf internal` function within the `obprintf.c` file. The manipulation leads to a reachable assertion. The exploit has been publicly disclosed.

A problematic issue exists in GNU Bison due to a double free in the `code free()` function located in the `src/scan-code.c` file. This issue requires local access for exploitation. The exploit details have been publicly disclosed.

A problematic issue exists in GNU cflow due to a null pointer dereference in the `yylex` function within the `c.c` file of the Lexer component. This issue can be exploited locally. The exploit has been publicly disclosed.

A critical vulnerability exists in GNU cflow up to version 1.8. The issue is located in the `yylex` function within the `c.c` file of the Lexer component and leads to a buffer overflow. Local access is required for exploitation. The exploit has been publicly disclosed.

The issue is a stack-based buffer over-read in the disasm component, which allows attackers to cause a denial of service, resulting in a crash.

A stack-based buffer over-read issue in the disasm function allows attackers to cause a denial of service.

The issue is a null pointer dereference in the `ieee write file` function, which allows attackers to cause a denial of service, resulting in a crash.

A stack overflow was discovered in the Ndisasm component of nasm.

A memory leak was discovered in the AP4 AvcFrameParser::Feed function in mp4mux.

A memory leak was discovered in Bento4 via the AP4 SttsAtom::Create function in mp42hls.

An issue was discovered that causes a crash in the `gfseek( IO FILE*, long, int)` function in the `goo/gfile.cc` file.