Sleicasper

**Name of the Vulnerable Software and Affected Versions** libdwarf version 0.4.0 **Description** The issue is a heap-based buffer over-read in libdwarf, related to the `dwarf global formref b` function. **Recommendations** For libdwarf version 0.4.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** libjpeg version 1.63 **Description** The issue is related to a NULL pointer dereference in the `Component::SubXOf` function located in `component.hpp`. **Recommendations** For libjpeg version 1.63, consider applying a patch or fix to resolve the NULL pointer dereference issue in the `Component::SubXOf` function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** libjpeg version 1.63 **Description** The issue is related to a NULL pointer dereference in the `LineBuffer::FetchRegion` function located in `linebuffer.cpp`. **Recommendations** For libjpeg version 1.63, update to a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** libjpeg version 1.63 **Description** The issue is a heap-based buffer over-read in the HierarchicalBitmapRequester::FetchRegion function, located in hierarchicalbitmaprequester.cpp. This occurs because the MCU size can differ between allocation and use, leading to potential memory access issues. **Recommendations** For libjpeg version 1.63, consider applying a patch or fix that addresses the heap-based buffer over-read issue in the HierarchicalBitmapRequester::FetchRegion function. As a temporary workaround, restrict the use of the HierarchicalBitmapRequester::FetchRegion function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Libraw versions prior to 0.20.1 **Description** The issue is related to a stack buffer overflow in the `LibRaw::identify process dng fields` function within the `identify.cpp` component of the Libraw image processing library. This overflow can be exploited by a remote attacker to gain access to confidential data, compromise data integrity, and cause a denial of service. **Recommendations** For versions prior to 0.20.1, update to version 0.20.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `LibRaw::identify process dng fields` function in `identify.cpp` until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** libIEC61850 versions prior to 1.4.1 **Description** The issue arises from a heap-based buffer overflow in the MmsValue decodeMmsData function when parsing the MMS BIT STRING data type. This occurs in the mms/iso mms/server/mms access result.c file of libIEC61850. **Recommendations** For versions prior to 1.4.1, update to version 1.4.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** mruby version 2.1.0 **Description** A use-after-free issue exists in the hash slice function located in mrbgems/mruby-hash-ext/src/hash-ext.c. **Recommendations** For mruby version 2.1.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** mruby version 2.1.0 **Description** A stack-based buffer overflow issue exists in the mrb str len to dbl function within string.c. **Recommendations** For mruby version 2.1.0, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** mruby version 2.1.0 **Description** A use-after-free issue exists in the hash values at function located in mrbgems/mruby-hash-ext/src/hash-ext.c. **Recommendations** For mruby version 2.1.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** stb versions prior to 1.23 **Description** The issue is related to an assertion failure in the `stbtt cff get index` function. **Recommendations** For versions prior to 1.23, update to version 1.23 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** stb versions prior to 1.23 **Description** The issue is related to an assertion failure in the `stbtt buf seek` function. **Recommendations** For versions prior to 1.23, update to version 1.23 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** stb versions 1.22 and earlier **Description** The issue is related to a heap-based buffer over-read in the `stbtt buf get8` function. **Recommendations** For versions 1.22 and earlier, update to a version that fixes the heap-based buffer over-read issue in the `stbtt buf get8` function.

**Name of the Vulnerable Software and Affected Versions** stb versions 1.22 and earlier **Description** The issue is related to a heap-based buffer over-read in the `ttUSHORT` function. **Recommendations** For versions 1.22 and earlier, update to a version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** stb versions prior to 1.23 **Description** The issue is related to a heap-based buffer over-read in the `stbtt buf peek8` function. **Recommendations** For versions prior to 1.23, update to version 1.23 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** libsixel version 1.8.4 **Description** The issue is related to an integer overflow in the `sixel frame resize` function within the `frame.c` file. **Recommendations** For libsixel version 1.8.4, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** libIEC61850 version 1.4.0 **Description** The issue is related to an integer signedness problem in the StringUtils createStringFromBuffer function, located in common/string utilities.c. This could potentially lead to an attempted excessive memory allocation, resulting in a denial of service. **Recommendations** For libIEC61850 version 1.4.0, consider applying a patch or fix that addresses the integer signedness issue in the StringUtils createStringFromBuffer function to prevent potential denial of service attacks.

**Name of the Vulnerable Software and Affected Versions** libIEC61850 version 1.4.0 **Description** The issue is related to an out-of-bounds read, specifically in the getNumberOfElements function within the mms access result.c file. This is connected to the variables bufPos and elementLength. **Recommendations** For libIEC61850 version 1.4.0, consider updating to a newer version that addresses this issue, as no specific fix is provided for this version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** libIEC61850 version 1.4.0 **Description** The issue is related to an integer signedness error in the MmsValue newOctetString function, located in the mms/iso mms/common/mms value.c file. This error can lead to an attempted excessive memory allocation. **Recommendations** For libIEC61850 version 1.4.0, consider applying a patch or fix to address the integer signedness error in the MmsValue newOctetString function to prevent excessive memory allocation attempts. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** libIEC61850 version 1.4.0 **Description** The issue is related to an out-of-bounds read in the BerDecoder decodeUint32 function, located in the mms/asn1/ber decode.c file. This is due to the handling of `intLen` and `bufPos` variables. **Recommendations** For libIEC61850 version 1.4.0, consider applying a patch or fix that addresses the out-of-bounds read in the BerDecoder decodeUint32 function to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** libIEC61850 version 1.4.0 **Description** The issue is related to a heap-based buffer overflow in the MmsValue decodeMmsData function, located in the mms/iso mms/server/mms access result.c file. **Recommendations** For libIEC61850 version 1.4.0, consider updating to a newer version that contains a fix for this issue, as using the MmsValue decodeMmsData function may pose a risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.