Yuqing Zhang

A problematic issue exists in the `mp4decrypt` component, specifically within the `AP4 DataBuffer::SetDataSize` function of the `Mp4Decrypt.cpp` file. This issue leads to resource allocation. The attack can be launched remotely, but is considered difficult to exploit. The exploit has been publicly disclosed.

A vulnerability was found in GNU PSPP, affecting the `calloc` function in the `pspp-convert.c` file. The manipulation of the argument `-l` leads to integer overflow. Local access is required to approach this attack.

A problematic issue exists in GNU cflow due to a null pointer dereference in the `yylex` function within the `c.c` file of the Lexer component. This issue can be exploited locally. The exploit has been publicly disclosed.

A critical vulnerability exists in GNU cflow up to version 1.8. The issue is located in the `yylex` function within the `c.c` file of the Lexer component and leads to a buffer overflow. Local access is required for exploitation. The exploit has been publicly disclosed.

A security issue has been identified in the `calc sleep time` function within the `send packets.c` file. Manipulation of this function can lead to a divide by zero error. Exploitation requires local access. The exploit has been publicly disclosed.

A problematic issue exists in GNU Bison due to a double free in the `code free()` function located in the `src/scan-code.c` file. This issue requires local access for exploitation. The exploit details have been publicly disclosed.

A problematic issue was found in GNU Bison affecting the ` obstack vprintf internal` function within the `obprintf.c` file. The manipulation leads to a reachable assertion. The exploit has been publicly disclosed.