CVE-2023-25662 – TensorFlow vulnerable to integer overflow in EditDistance
https://notcve.org/view.php?id=CVE-2023-25662
Versions prior to 2.12.0 and 2.11.1 are vulnerable to integer overflow in EditDistance. • https://github.com/tensorflow/tensorflow/commit/08b8e18643d6dcde00890733b270ff8d9960c56c https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7jvm-xxmr-v5cw • CWE-190: Integer Overflow or Wraparound •
CVE-2023-25667 – TensorFlow vulnerable to segfault when opening multiframe gif
https://notcve.org/view.php?id=CVE-2023-25667
Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when `2^31 <= num_frames * height * width * channels < 2^32`, for example Full HD screencast of at least 346 frames. • https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fqm2-gh8w-gr68 • CWE-190: Integer Overflow or Wraparound •
CVE-2022-20532
https://notcve.org/view.php?id=CVE-2022-20532
In parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow. • https://source.android.com/security/bulletin/pixel/2023-03-01 • CWE-190: Integer Overflow or Wraparound •
CVE-2023-21065
https://notcve.org/view.php?id=CVE-2023-21065
In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. • https://source.android.com/security/bulletin/pixel/2023-03-01 • CWE-190: Integer Overflow or Wraparound •
CVE-2023-28097 – OpenSIPS has vulnerability in the Content-Length Parser
https://notcve.org/view.php?id=CVE-2023-28097
OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.9 and 3.2.6, a malformed SIP message containing a large _Content-Length_ value and a specially crafted Request-URI causes a segmentation fault in OpenSIPS. This issue occurs when a large amount of shared memory using the `-m` flag was allocated to OpenSIPS, such as 10 GB of RAM. On the test system, this issue occurred when shared memory was set to `2362` or higher. This issue is fixed in versions 3.1.9 and 3.2.6. • https://github.com/OpenSIPS/opensips/commit/7cab422e2fc648f910abba34f3f0dbb3ae171ff5 https://github.com/OpenSIPS/opensips/security/advisories/GHSA-c6j5-f4h4-2xrq https://opensips.org/pub/audit-2022/opensips-audit-technical-report-full.pdf • CWE-190: Integer Overflow or Wraparound •