CVE’s

In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (librawsrcmetadatasony.cpp) when processing srf files.

In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (librawsrcdecoderscrx.cpp) when processing cr3 files.

In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function (librawsrcdecodersdng.cpp) when reading data from the image file.

In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (librawsrcx3fx3f_utils_patched.cpp) which can be triggered via an image with a large row_stride field.

In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function (librawsrcx3fx3f_utils_patched.cpp) when reading data from an image file.

In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (librawsrcx3fx3f_utils_patched.cpp) that can be triggered via a crafted X3F file.

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information.

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none.

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none.

In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.