deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-39996
Published: 2022-01-10
Description: There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memory overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://consumer.huawei.com/en/support/bulletin/2021/12/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202112-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2021/12/
CVE: CVE-2021-39998
Published: 2022-01-10
Description: There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExService a in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2021/12/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202112-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2021/12/
CVE: CVE-2021-40000
Published: 2022-01-10
Description: The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202112-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202112-[PII_REDACTED]
CVE: CVE-2021-40001
Published: 2022-01-10
Description: The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the MeeTime application to be unavailable.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202112-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202112-[PII_REDACTED]
CVE: CVE-2021-40002
Published: 2022-01-10
Description: The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202112-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202112-[PII_REDACTED]
CVE: CVE-2021-40003
Published: 2022-01-10
Description: HwPCAssistant has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202112-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202112-[PII_REDACTED]
CVE: CVE-2021-40004
Published: 2022-01-10
Description: The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202112-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202112-[PII_REDACTED]
CVE: CVE-2021-40005
Published: 2022-01-10
Description: The distributed data service component has a vulnerability in data access control. Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202112-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202112-[PII_REDACTED]
CVE: CVE-2021-40006
Published: 2022-01-10
Description: Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may affect confidentiality.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-254, CWE-327
References: https://consumer.huawei.com/en/support/bulletin/2023/8/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202112-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202308-[PII_REDACTED]
CVE: CVE-2021-40009
Published: 2022-01-10
Description: There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-787
References: https://consumer.huawei.com/en/support/bulletin/2022/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/1/
CVE: CVE-2021-40010
Published: 2022-01-10
Description: The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://consumer.huawei.com/en/support/bulletin/2022/5/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202201-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/5/
CVE: CVE-2021-40011
Published: 2022-01-10
Description: There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect integrity.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://consumer.huawei.com/en/support/bulletin/2022/1/; https://consumer.huawei.com/en/support/bulletin/2022/3/; https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202203-[PII_REDACTED]
CVE: CVE-2021-40014
Published: 2022-01-10
Description: The bone voice ID trusted application (TA) has a heap overflow vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]
CVE: CVE-2021-40018
Published: 2022-01-10
Description: The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]
CVE: CVE-2021-40020
Published: 2022-01-10
Description: There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://consumer.huawei.com/en/support/bulletin/2022/1/; https://consumer.huawei.com/en/support/bulletin/2022/1/
CVE: CVE-2021-40021
Published: 2022-01-10
Description: The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]
CVE: CVE-2021-40022
Published: 2022-01-10
Description: The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]
CVE: CVE-2021-40025
Published: 2022-01-10
Description: The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-665
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]
CVE: CVE-2021-40026
Published: 2022-01-10
Description: There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://consumer.huawei.com/en/support/bulletin/2022/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/1/
CVE: CVE-2021-40027
Published: 2022-01-10
Description: The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-119
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]
CVE: CVE-2021-40028
Published: 2022-01-10
Description: The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]
CVE: CVE-2021-40029
Published: 2022-01-10
Description: There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://consumer.huawei.com/en/support/bulletin/2022/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/1/
CVE: CVE-2021-40031
Published: 2022-01-10
Description: There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2022/1/; https://consumer.huawei.com/en/support/bulletin/2022/1/
CVE: CVE-2021-40032
Published: 2022-01-10
Description: The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]
CVE: CVE-2021-40035
Published: 2022-01-10
Description: There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://consumer.huawei.com/en/support/bulletin/2022/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/1/
CVE: CVE-2021-40037
Published: 2022-01-10
Description: There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-843
References: https://consumer.huawei.com/en/support/bulletin/2022/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/1/
CVE: CVE-2021-40038
Published: 2022-01-10
Description: There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.
CVSS Score: 7.5 (HIGH)
CWE: CWE-415
References: https://consumer.huawei.com/en/support/bulletin/2022/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/1/
CVE: CVE-2021-40039
Published: 2022-01-10
Description: There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2022/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/1/
CVE: CVE-2021-40041
Published: 2022-01-10
Description: There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings. Due to insufficient validation of user input, a local authenticated attacker could exploit this vulnerability by injecting special characters. Successful exploit could cause certain information disclosure. Affected product versions include: WS318n-21 10.0.2.2, 10.0.2.5 and 10.0.2.6.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-79
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211229-01-xss-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211229-01-xss-en
CVE: CVE-2021-42392
Published: 2022-01-10
Description: The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited through various attack vectors, most notably through the H2 Console which leads to unauthenticated remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://github.com/h2database/h2database/security/advisories/GHSA-h376-j262-vhq6; https://jfrog.com/blog/the-jndi-strikes-back-unauthenticated-rce-in-h2-database-console/; https://lists.debian.org/debian-lts-announce/2022/02/msg00017.html
CVE: CVE-2021-42748
Published: 2022-01-10
Description: In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-425
References: https://docs.wpbeaverbuilder.com/beaver-builder/developer/conditionally-hidden-content/; https://tekfused.com/tek/vulnerability-research/beaver-builder-vulnerabilities-visibility-conditional-logic-cve/; https://docs.wpbeaverbuilder.com/beaver-builder/developer/conditionally-hidden-content/
CVE: CVE-2021-42749
Published: 2022-01-10
Description: In Beaver Themer, attackers can bypass conditional logic controls (for hiding content) when viewing the post archives. Exploitation requires that a Themer layout is applied to the archives, and that the post excerpt field is not set.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-668
References: https://docs.wpbeaverbuilder.com/beaver-builder/developer/conditionally-hidden-content/; https://tekfused.com/tek/vulnerability-research/beaver-builder-vulnerabilities-visibility-conditional-logic-cve/; https://docs.wpbeaverbuilder.com/beaver-builder/developer/conditionally-hidden-content/
CVE: CVE-2021-43579
Published: 2022-01-10
Description: A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/michaelrsweet/htmldoc/commit/27d08989a5a567155d506ac870ae7d8cc88fa58b; https://github.com/michaelrsweet/htmldoc/compare/v1.9.12...v1.9.13; https://github.com/michaelrsweet/htmldoc/issues/453
CVE: CVE-2021-44024
Published: 2022-01-10
Description: A link following denial-of-service vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: https://success.trendmicro.com/solution/000289996; https://www.zerodayinitiative.com/advisories/ZDI-22-014/; https://success.trendmicro.com/solution/000289996
CVE: CVE-2021-44528
Published: 2022-01-10
Description: A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/rails/rails/commit/0fccfb9a3097a9c4260c791f1a40b128517e7815; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.debian.org/security/2023/dsa-5372
CVE: CVE-2021-45003
Published: 2022-01-10
Description: Laundry Booking Management System 1.0 (Latest) and previous versions are affected by a remote code execution (RCE) vulnerability in profile.php through the "image" parameter that can execute a webshell payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://drive.google.com/drive/folders/1VuWo2JS7VTh9KPRnoi7CZZQgVZ4msBav?usp=sharing; https://github.com/qerogram/BUG_WEB/tree/main/OpenSource/CVE-2021-45003; https://drive.google.com/drive/folders/1VuWo2JS7VTh9KPRnoi7CZZQgVZ4msBav?usp=sharing
CVE: CVE-2021-45231
Published: 2022-01-10
Description: A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to create a specially crafted file with arbitrary content which could grant local privilege escalation on the affected system. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://success.trendmicro.com/solution/000289996; https://www.zerodayinitiative.com/advisories/ZDI-22-013/; https://success.trendmicro.com/solution/000289996
CVE: CVE-2021-45334
Published: 2022-01-10
Description: Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-45334; https://packetstormsecurity.com/files/165272/Online-Thesis-Archiving-System-1.0-SQL-Injection-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/50597
CVE: CVE-2021-45440
Published: 2022-01-10
Description: A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 (on-prem versions only) could allow a local attacker to abuse an impersonation privilege and elevate to a higher level of privileges. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://success.trendmicro.com/solution/000289996; https://www.zerodayinitiative.com/advisories/ZDI-22-016/; https://success.trendmicro.com/solution/000289996
CVE: CVE-2021-45441
Published: 2022-01-10
Description: A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and manipulate a specially crafted file to issue commands over a certain pipe and elevate to a higher level of privileges. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-346
References: https://success.trendmicro.com/solution/000289996; https://www.zerodayinitiative.com/advisories/ZDI-22-017/; https://success.trendmicro.com/solution/000289996
CVE: CVE-2021-45442
Published: 2022-01-10
Description: A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on prem only) could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. This is similar to, but not the same as CVE-2021-44024. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: https://success.trendmicro.com/solution/000289996; https://www.zerodayinitiative.com/advisories/ZDI-22-015/; https://success.trendmicro.com/solution/000289996
CVE: CVE-2021-45856
Published: 2022-01-10
Description: Accu-Time Systems MAXIMUS 1.0 telnet service suffers from a remote buffer overflow which causes the telnet service to crash
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://packetstormsecurity.com/files/165392/Accu-Time-Systems-MAXIMUS-1.0-Buffer-Overflow-Denial-Of-Service.html; https://packetstormsecurity.com/files/165392/Accu-Time-Systems-MAXIMUS-1.0-Buffer-Overflow-Denial-Of-Service.html
CVE: CVE-2021-46045
Published: 2022-01-10
Description: GPAC 1.0.1 is affected by: Abort failed. The impact is: cause a denial of service (context-dependent).
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/gpac/gpac/issues/2007; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/issues/2007
CVE: CVE-2021-46046
Published: 2022-01-10
Description: A Pointer Derefernce Vulnerbility exists GPAC 1.0.1 the gf_isom_box_size function, which could cause a Denial of Service (context-dependent).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/2005; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/issues/2005
CVE: CVE-2021-46047
Published: 2022-01-10
Description: A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_hinter_finalize function.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/2008; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/issues/2008
CVE: CVE-2021-46048
Published: 2022-01-10
Description: A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::readFunctions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-617
References: https://github.com/WebAssembly/binaryen/issues/4412; https://github.com/WebAssembly/binaryen/issues/4412
CVE: CVE-2021-46049
Published: 2022-01-10
Description: A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_fileio_check function, which could cause a Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/2013; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/issues/2013
CVE: CVE-2021-46050
Published: 2022-01-10
Description: A Stack Overflow vulnerability exists in Binaryen 103 via the printf_common function.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/WebAssembly/binaryen/issues/4391; https://github.com/WebAssembly/binaryen/issues/4391
CVE: CVE-2021-46051
Published: 2022-01-10
Description: A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the Media_IsSelfContained function, which could cause a Denial of Service. .
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/2011; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/issues/2011
CVE: CVE-2021-46052
Published: 2022-01-10
Description: A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-617
References: https://github.com/WebAssembly/binaryen/issues/4411; https://github.com/WebAssembly/binaryen/issues/4411