CWE-194 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-194/ Sun, 26 Feb 2023 06:45:02 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-194 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-194/ 32 32 CVE-2018-10887 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-10887/ Sun, 26 Feb 2023 06:45:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-10887/ A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c file may lead to an integer overflow which in turn leads to an out of bound read, allowing to read before the base object. An attacker may use this flaw to leak […]

The post CVE-2018-10887 appeared first on CVE Vulnerability.

]]> A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c file may lead to an integer overflow which in turn leads to an out of bound read, allowing to read before the base object. An attacker may use this flaw to leak memory addresses or cause a Denial of Service.

The post CVE-2018-10887 appeared first on CVE Vulnerability.

]]> CVE-2021-38434 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-38434/ Thu, 23 Feb 2023 14:11:12 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-38434/ FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an unexpected sign extension. An attacker could leverage this vulnerability to execute arbitrary code.

The post CVE-2021-38434 appeared first on CVE Vulnerability.

]]> FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an unexpected sign extension. An attacker could leverage this vulnerability to execute arbitrary code.

The post CVE-2021-38434 appeared first on CVE Vulnerability.

]]> CVE-2022-32138 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-32138/ Thu, 23 Feb 2023 05:19:00 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-32138/ In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite.

The post CVE-2022-32138 appeared first on CVE Vulnerability.

]]> In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite.

The post CVE-2022-32138 appeared first on CVE Vulnerability.

]]>