debian/advancecomp vulnerabilities

Latest debian/advancecomp CVEs

Newest publication first

1. CVE-2023-2961 A segmentation fault flaw was found in the Advancecomp package. This may lead to decreased availability.

   Published 2023-06-06

   Low·CVSS 3.3 EPSS 0.19%

   A segmentation fault flaw was found in the Advancecomp package. This may lead to decreased availability.

2. CVE-2022-35020 Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_common/sanitizer_common_interceptors.inc.

   Published 2022-08-29

   Medium·CVSS 5.5 EPSS 0.47%

   Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_common/sanitizer_common_interceptors.inc.

3. CVE-2022-35019 Advancecomp v2.3 was discovered to contain a segmentation fault.

   Published 2022-08-29

   Medium·CVSS 5.5 EPSS 0.45%

   Advancecomp v2.3 was discovered to contain a segmentation fault.

4. CVE-2022-35018 Advancecomp v2.3 was discovered to contain a segmentation fault.

   Published 2022-08-29

   Medium·CVSS 5.5 EPSS 0.45%

   Advancecomp v2.3 was discovered to contain a segmentation fault.

5. CVE-2022-35017 Advancecomp v2.3 was discovered to contain a heap buffer overflow.

   Published 2022-08-29

   Medium·CVSS 5.5 EPSS 0.47%

   Advancecomp v2.3 was discovered to contain a heap buffer overflow.

6. CVE-2022-35016 Advancecomp v2.3 was discovered to contain a heap buffer overflow.

   Published 2022-08-29

   Medium·CVSS 5.5 EPSS 0.47%

   Advancecomp v2.3 was discovered to contain a heap buffer overflow.

7. CVE-2022-35015 Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.

   Published 2022-08-29

   Medium·CVSS 5.5 EPSS 0.47%

   Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.

8. CVE-2022-35014 Advancecomp v2.3 contains a segmentation fault.

   Published 2022-08-29

   Medium·CVSS 5.5 EPSS 0.45%

   Advancecomp v2.3 contains a segmentation fault.

9. DLA-2868-1 advancecomp - security update

   Published 2021-12-29

   Unknown

10. DLA-1702-1 advancecomp - security update

    Published 2019-03-02

    Unknown

11. CVE-2019-9210 In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (Th...

    Published 2019-02-27

    High·CVSS 7.8 EPSS 1.4%

    In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (There is also a heap-based buffer over-read.)

12. CVE-2019-8383 An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function adv_png_unfilter_8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It allo...

    Published 2019-02-17

    High·CVSS 7.8 EPSS 1.2%

    An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function adv_png_unfilter_8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly hav...

13. CVE-2019-8379 An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function be_uint32_read() located in endianrw.h. It can be triggered by sending a crafted file to a binary....

    Published 2019-02-17

    High·CVSS 7.8 EPSS 1.2%

    An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function be_uint32_read() located in endianrw.h. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or poss...

14. CVE-2018-1056 An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. An attacker could potentially use this flaw to crash the advzip utility by t...

    Published 2018-07-27

    High·CVSS 7.8 EPSS 1.4%

    An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. An attacker could potentially use this flaw to crash the advzip utility by tricking it into processing crafted ZIP files.

15. DLA-1281-1 advancecomp - security update

    Published 2018-02-13

    Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.