Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-44857 State: PUBLISHED Published: 2021-12-17T00:00:00 Last Updated: 2024-08-04T04:32:13.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. It is possible to use action=mcrundo followed by action=mcrrestore to replace the content of any arbitrary page (that the user doesn't have edit rights for). This applies to any public wiki, or a private wiki that has at least one page set in $wgWhitelistRead. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T297322 - https://www.mediawiki.org/wiki/2021-12_security_release/FAQ -
References: - https://phabricator.wikimedia.org/T297322 - https://www.mediawiki.org/wiki/2021-12_security_release/FAQ - https://security.gentoo.org/glsa/202305-24
CVE ID: CVE-2021-44858 State: PUBLISHED Published: 2021-12-20T00:00:00 Last Updated: 2024-08-04T04:32:13.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. It is possible to use action=edit&undo= followed by action=mcrundo and action=mcrrestore to view private pages on a private wiki that has at least one page set in $wgWhitelistRead. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T297322 - https://www.mediawiki.org/wiki/2021-12_security_release/FAQ - https://security.gentoo.org/glsa/202305-24
CVE ID: CVE-2021-44859 State: PUBLISHED Published: 2021-12-21T18:26:29 Last Updated: 2024-08-04T04:32:13.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read vulnerability exists when reading a TGA file using Open Design Alliance Drawings SDK before 2022.12. The specific issue exists after loading TGA files. An unchecked input data from a crafted TGA file leads to an out-of-bounds read. An attacker can leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.opendesign.com/security-advisories
CVE ID: CVE-2021-44860 State: PUBLISHED Published: 2021-12-21T18:26:02 Last Updated: 2024-08-04T04:32:13.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read vulnerability exists when reading a TIF file using Open Design Alliance Drawings SDK before 2022.12. The specific issue exists after loading TIF files. An unchecked input data from a crafted TIF file leads to an out-of-bounds read. An attacker can leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.opendesign.com/security-advisories
CVE ID: CVE-2021-44862 State: PUBLISHED Published: 2022-11-03T19:20:41.897Z Last Updated: 2025-05-02T18:47:57.929Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Netskope Products: NSClient Problem Types: CWE-532 Description: Netskope client is impacted by a vulnerability where an authenticated, local attacker can view sensitive information stored in NSClient logs which should be restricted. The vulnerability exists because the sensitive information is not masked/scrubbed before writing in the logs. A malicious user can use the sensitive information to download data and impersonate another user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
ormation to download data and impersonate another user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/netskope-security-advisory-nskpsa-2022-001
CVE ID: CVE-2021-44864 State: PUBLISHED Published: 2022-02-08T14:23:26 Last Updated: 2024-08-04T04:32:13.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WR886N 3.0 1.0.1 Build 150127 Rel.34123n is vulnerable to Buffer Overflow. Authenticated attackers can crash router httpd services via /userRpm/PingIframeRpm.htm request which contains redundant & in parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhlu32/cve/blob/main/tplink/wr886n/Tplink-wr886n-V3-Ping-DOS.md
CVE ID: CVE-2021-44866 State: PUBLISHED Published: 2022-02-03T13:19:33 Last Updated: 2024-08-04T04:32:13.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Online-Movie-Ticket-Booking-System 1.0. The file about.php does not perform input validation on the 'id' paramter. An attacker can append SQL queries to the input to extract sensitive information from the database. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/projectworldsofficial/Online-Movie-Ticket-Booking-System-in-php/issues/6
CVE ID: CVE-2021-44868 State: PUBLISHED Published: 2022-02-17T15:44:16 Last Updated: 2024-08-04T04:32:12.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ming-soft/MCMS/issues/58
CVE ID: CVE-2021-44874 State: PUBLISHED Published: 2021-12-21T16:22:28 Last Updated: 2024-08-04T04:32:13.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Insecure design on report build via SQL query. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. The bi report module exposes direct SQL commands via POST data in order to select data for report generation. A malicious actor can use the bi report endpoint as a direct SQL prompt under the authenticated user. Additional Analyst Notes: - CVE Program C
se the bi report endpoint as a direct SQL prompt under the authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://www.systeam.com.br/cve/insecure%20design%20-%20sql%20manipulation-en.txt
CVE ID: CVE-2021-44875 State: PUBLISHED Published: 2021-12-21T16:20:34 Last Updated: 2024-08-04T04:32:13.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. This issue occurs during the password recovery procedure for a given user, where a difference in messages could allow an attacker to determine if the given user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: Refer
s valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: References: - https://www.systeam.com.br/cve/userenum-2-en.txt
CVE ID: CVE-2021-44876 State: PUBLISHED Published: 2021-12-21T16:20:52 Last Updated: 2024-08-04T04:32:13.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. This issue occurs during the identification of the correct tenant for a given user, where a difference in messages could allow an attacker to determine if the given user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Contain
en user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: References: - https://www.systeam.com.br/cve/userenum-1-en.txt
CVE ID: CVE-2021-44877 State: PUBLISHED Published: 2021-12-21T16:17:42 Last Updated: 2024-08-04T04:32:13.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect Access Control. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. A broken access control vulnerability has been found while using a temporary generated token in order to consume api resources. The vulnerability allows an unauthenticated attacker to use an api endpoint to generate a temporary JWT token that is designed to reference the co
n unauthenticated attacker to use an api endpoint to generate a temporary JWT token that is designed to reference the correct tenant prior to authentication, to request system configuration parameters using direct api requests. The correct exploitation of this vulnerability causes sensitive information exposure. In case the tenant has an smtp credential set, the full credential information is disclosed. Additional Analyst Notes: - CVE Program Container: References: - https://www.systeam.com.br/cve/broken-access-control-en.txt
CVE ID: CVE-2021-44878 State: PUBLISHED Published: 2022-01-06T12:52:04 Last Updated: 2024-08-04T04:32:13.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: If an OpenID Connect provider supports the "none" algorithm (i.e., tokens with no signature), pac4j v5.3.0 (and prior) does not refuse it without an explicit configuration on its side or for the "idtoken" response type which is not secure and violates the OpenID Core Specification. The "none" algorithm does not require any signature verification when validating the ID tokens, which allows the attacker to bypass the token validation by injecting a malformed ID token using "none" as the value of "alg" key in the header with an
ass the token validation by injecting a malformed ID token using "none" as the value of "alg" key in the header with an empty signature value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pac4j/pac4j/commit/22b82ffd702a132d9f09da60362fc6264fc281ae - https://openid.net/specs/openid-connect-core-1_0.html#IDToken - https://www.pac4j.org/blog/cve_2021_44878_is_this_serious.html
CVE ID: CVE-2021-44879 State: PUBLISHED Published: 2022-02-13T00:00:00 Last Updated: 2024-08-04T04:32:13.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3 - https://bugzilla.kernel.org/show_bug.cgi?id=215231 - https://lore.kernel.org/linux-f2fs-devel/20211206144421.3735-3-chao%40kernel.org/T/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9056d6489f5a41cfbb67f719d2c
ernel.org/T/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9056d6489f5a41cfbb67f719d2c0ce61ead72d9f - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html
CVE ID: CVE-2021-44880 State: PUBLISHED Published: 2022-02-04T01:34:02 Last Updated: 2024-08-04T04:32:13.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link devices DIR_878 DIR_878_FW1.30B08_Hotfix_02 and DIR_882 DIR_882_FW1.30B06_Hotfix_02 were discovered to contain a command injection vulnerability in the system function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_2/2.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SA
di/my_vuln/blob/main/D-link/vuln_2/2.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10287 - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10286
CVE ID: CVE-2021-44881 State: PUBLISHED Published: 2022-02-04T01:34:01 Last Updated: 2024-08-04T04:32:13.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_3/3.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10287
CVE ID: CVE-2021-44882 State: PUBLISHED Published: 2022-02-04T01:34:00 Last Updated: 2024-08-04T04:32:12.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device DIR_878_FW1.30B08_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_1/1.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10286
CVE ID: CVE-2021-44886 State: PUBLISHED Published: 2022-02-04T14:21:17 Last Updated: 2024-08-04T04:32:12.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zammad 5.0.2, agents can configure "out of office" periods and substitute persons. If the substitute persons didn't have the same permissions as the original agent, they could receive ticket notifications for tickets that they have no access to. Additional Analyst Notes: - CVE Program Container: References: - https://zammad.com/en/advisories/zaa-2021-21
CVE ID: CVE-2021-44892 State: PUBLISHED Published: 2022-02-10T16:05:25 Last Updated: 2024-08-04T04:32:13.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Remote Code Execution (RCE) vulnerability exists in ThinkPHP 3.x.x via value[_filename] in index.php, which could let a malicious user obtain server control privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Stakcery/Web-Security/issues/1
CVE ID: CVE-2021-44896 State: PUBLISHED Published: 2022-01-01T22:45:29 Last Updated: 2024-08-04T04:32:13.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: DMP Roadmap before 3.0.4 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DMPRoadmap/roadmap/commit/0b83ad31ac01a709633080b134cfb6debc310c5e - https://github.com/DMPRoadmap/roadmap/pull/3030 - https://github.com/DMPRoadmap/roadmap/compare/v3.0.3...v3.0.4
CVE ID: CVE-2021-44899 State: PUBLISHED Published: 2022-02-04T10:56:40 Last Updated: 2024-08-04T04:32:13.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Micro-Star International (MSI) Center <= 1.0.31.0 is vulnerable to multiple Privilege Escalation vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLib_X64.sys, WinRing0.sys, WinRing0x64.sys drivers components. All the vulnerabilities are triggered by sending specific IOCTL requests. Additional Analyst Notes: - CVE Program Container: References: - https://voidsec.com - https://voidsec.com/advisories/cve-2021-44899/
CVE ID: CVE-2021-44900 State: PUBLISHED Published: 2022-02-04T10:57:59 Last Updated: 2024-08-04T04:32:13.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Micro-Star International (MSI) App Player <= 4.280.1.6309 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulnerabilities in the NTIOLib_X64.sys and BstkDrv_msi2.sys drivers components. All the vulnerabilities are triggered by sending specific IOCTL requests. Additional Analyst Notes: - CVE Program Container: References: - https://voidsec.com - https://voidsec.com/advisories/cve-2021-44900/
CVE ID: CVE-2021-44901 State: PUBLISHED Published: 2022-02-04T10:59:51 Last Updated: 2024-08-04T04:32:13.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Micro-Star International (MSI) Dragon Center <= 2.0.116.0 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLib_X64.sys, WinRing0.sys, WinRing0x64.sys drivers components. All the vulnerabilities are triggered by sending specific IOCTL requests. Additional Analyst Notes: - CVE Program Container: References: - https://voidsec.com - https://voidsec.com/advisories/cve-2021-44901/
CVE ID: CVE-2021-44903 State: PUBLISHED Published: 2022-02-04T11:01:54 Last Updated: 2024-08-04T04:32:13.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Micro-Star International (MSI) Center Pro <= 2.0.16.0 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLib_X64.sys, WinRing0.sys, WinRing0x64.sys drivers components. All the vulnerabilities are triggered by sending specific IOCTL requests. Additional Analyst Notes: - CVE Program Container: References: - https://voidsec.com - https://voidsec.com/advisories/cve-2021-44903/
CVE ID: CVE-2021-44905 State: PUBLISHED Published: 2022-03-25T20:29:50 Last Updated: 2024-08-04T04:32:13.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect permissions in the Bluetooth Services in the Fortessa FTBTLD Smart Lock as of 12-13-2022 allows a remote attacker to disable the lock via an unauthenticated edit to the lock name. Additional Analyst Notes: - CVE Program Container: References: - https://online.fliphtml5.com/fbwgm/fome/#p=20 - https://ashallen.net/fortessa-ftbtld-smart-lock-allows-unauthorized-users-to-change-the-device-name-hilarity-ensues
CVE ID: CVE-2021-44906 State: PUBLISHED Published: 2022-03-17T13:05:57 Last Updated: 2024-08-04T04:32:13.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95). Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 - https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/minimist%20PoC.zip - https://github.com/substack/minimist/blob/master/index.js#L69 - https://stackoverflow.com/questions/8588563/adding-custom-properties-to-a-function/20278068#20278068 - https://github.com/substack/minimist/issues/164 - http
588563/adding-custom-properties-to-a-function/20278068#20278068 - https://github.com/substack/minimist/issues/164 - https://security.netapp.com/advisory/ntap-20240621-0006/
CVE ID: CVE-2021-44907 State: REJECTED Published: 2022-03-17T20:43:10 Last Updated: 2022-04-11T17:43:12 Description: No description available.
CVE ID: CVE-2021-44908 State: PUBLISHED Published: 2022-03-17T11:47:52 Last Updated: 2024-08-04T04:32:12.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: SailsJS Sails.js <=1.4.0 is vulnerable to Prototype Pollution via controller/load-action-modules.js, function loadActionModules(). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/sailsJS%20PoC.zip - https://github.com/balderdashy/sails/blob/master/lib/app/private/controller/load-action-modules.js#L32 - https://github.com/balderdashy/sails/issues/7209
CVE ID: CVE-2021-44911 State: PUBLISHED Published: 2022-02-09T15:40:49 Last Updated: 2024-08-04T04:32:13.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: XE before 1.11.6 is vulnerable to Unrestricted file upload via modules/menu/menu.admin.controller.php. When uploading the Mouse over button and When selected button, there is no restriction on the file suffix, which leads to any file uploading to the files directory. Since .htaccess only restricts the PHP type, uploading HTML-type files leads to stored XSS vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xpressengine/xe-core/issues/2434
CVE ID: CVE-2021-44912 State: PUBLISHED Published: 2022-02-09T15:55:05 Last Updated: 2024-08-04T04:32:13.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: In XE 1.116, when uploading the Normal button, there is no restriction on the file suffix, which leads to any file uploading to the files directory. Since .htaccess only restricts the PHP type, uploading HTML-type files leads to stored XSS vulnerabilities. If the .htaccess configuration is improper, for example before the XE 1.11.2 version, you can upload the PHP type file to GETSHELL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xpressengine/xe-core/issues/2433
CVE ID: CVE-2021-44915 State: PUBLISHED Published: 2022-07-05T17:12:57 Last Updated: 2024-08-04T04:32:13.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Taocms 3.0.2 was discovered to contain a blind SQL injection vulnerability via the function Edit category. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/taogogo/taocms/issues/8
CVE ID: CVE-2021-44916 State: PUBLISHED Published: 2021-12-20T11:31:48 Last Updated: 2024-08-04T04:32:13.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS) vulnerability. If a bad value is passed to the routine via a URL, malicious JavaScript code can be executed in the victim's browser. Additional Analyst Notes: - CVE Program Container: References: - https://community.opmantek.com/display/OA/Errata+-+4.2.0+and+earlier+Javascript+vulnerability - https://community.opmantek.com/display/OA/Release+Notes+for+Open-AudIT+v4.3.0 - https://github.com/Opmantek/open-audit/commit/e37b64bbd0219f
mantek.com/display/OA/Release+Notes+for+Open-AudIT+v4.3.0 - https://github.com/Opmantek/open-audit/commit/e37b64bbd0219f03cb71cc1cd5bb010166a2b846 - http://packetstormsecurity.com/files/165502/Open-AudIT-Community-4.2.0-Cross-Site-Scripting.html
CVE ID: CVE-2021-44917 State: PUBLISHED Published: 2021-12-21T19:57:14 Last Updated: 2024-08-04T04:32:13.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/gnuplot/bugs/2358/ - https://sourceforge.net/p/gnuplot/bugs/2474/
CVE ID: CVE-2021-44918 State: PUBLISHED Published: 2021-12-21T20:08:23 Last Updated: 2024-08-04T04:32:13.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null Pointer Dereference vulnerability exists in gpac 1.1.0 in the gf_node_get_field function, which can cause a segmentation fault and application crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1968
CVE ID: CVE-2021-44919 State: PUBLISHED Published: 2021-12-21T20:13:05 Last Updated: 2024-08-04T04:32:13.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null Pointer Dereference vulnerability exists in the gf_sg_vrml_mf_alloc function in gpac 1.1.0-DEV, which causes a segmentation fault and application crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1963
CVE ID: CVE-2021-44920 State: PUBLISHED Published: 2021-12-21T20:16:04 Last Updated: 2024-08-04T04:32:13.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid memory address dereference vulnerability exists in gpac 1.1.0 in the dump_od_to_saf.isra function, which causes a segmentation fault and application crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1957