Security Vulnerabilities - CVEs Published In August 2023
An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to denial of service because PDFDoc::replacePageDict in PDFDoc.cc lacks a stream check before saving an embedded file.
CVSS Score
6.5
EPSS Score
0.001
Published
2023-08-22
An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.
CVSS Score
6.5
EPSS Score
0.0
Published
2023-08-22
The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-08-22
Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function.
CVSS Score
8.8
EPSS Score
0.001
Published
2023-08-22
A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-08-22
A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-08-22
A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0.
CVSS Score
7.5
EPSS Score
0.002
Published
2023-08-22
A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0.
CVSS Score
7.5
EPSS Score
0.002
Published
2023-08-22
A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.
CVSS Score
7.5
EPSS Score
0.004
Published
2023-08-22
A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0.
CVSS Score
7.5
EPSS Score
0.004
Published
2023-08-22