NickName

Unintentional integer overflow

7

Dear developer: There is a potential integer overflow as indicated by the following function: https://github.com/allyourcodebase/ffmpeg/blob/main/libavcodec/pcm-dvdenc.c#L119 FFmpeg already patched this using the following commit. https://github.com/FFmpeg/FFmpeg/commit/160b81ce2a87b0835125da7c72ab7ed8c0918c45 Do we need to update this...

Security overflow patch

2

https://github.com/timi-liuliang/echo/blob/master/thirdparty/google/tensorflow/lite/kernels/embedding_lookup_sparse.cc#L146 is potential overflow when creating required bytes. patched by developer:https://github.com/tensorflow/tensorflow/commit/1de49725a5fc4e48f1a3b902ec3599ee99283043

openssl update

9

There may be vulnerabilities in the current inherited openssl: https://github.com/janbar/openssl-cmake/blob/master/ssl/statem/statem_srvr.c#L55 and https://github.com/janbar/openssl-cmake/blob/master/ssl/statem/statem_clnt.c#L85 as indicated by this commit: https://github.com/openssl/openssl/commit/50a0af2e41ea61a79c19c17f9e87541e283ba8bf

security issues in the library

9

We find several security vulnerable issue in the used library: https://github.com/TrinityEmulator/TrinityEmulator/blob/main/ui/vnc.c#L3485 patched by https://github.com/qemu/qemu/commit/3f9c41c5df9617510d8533cf6588172efb3df34b vnc: avoid underflow when accessing user-provided address If hostlen is zero, there is a possibility that...