Vulnerabilities (CVE)

Filtered by CWE-562
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-41837 2 Debian, Openimageio 2 Debian Linux, Openimageio 2024-11-21 N/A 9.8 CRITICAL
An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially-crafted exif metadata can lead to stack-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2020-21686 1 Nasm 1 Netwide Assembler 2024-10-07 N/A 5.5 MEDIUM
A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file.
CVE-2024-33045 1 Qualcomm 360 Ar8035, Ar8035 Firmware, Csra6620 and 357 more 2024-09-04 N/A 7.8 HIGH
Memory corruption when BTFM client sends new messages over Slimbus to ADSP.