zhangzhourui

CVE-2022-46440 WRITEUP MEDIUM WORKING POC

swftools 0.9.2 - Out-of-bounds Read via readU16 Function

ttftool v0.9.2 was discovered to contain a segmentation violation via the readU16 function at ttf.c.

CVSS 5.5

View Code

CVE-2023-27249 WRITEUP MEDIUM WORKING POC

swftools 0.9.2 - Heap Buffer Overflow in swf_GetPlaceObject

swfdump v0.9.2 was discovered to contain a heap buffer overflow in the function swf_GetPlaceObject at swfobject.c.

CVSS 5.5

View Code

CVE-2024-33763 WRITEUP HIGH WORKING POC

lunasvg 2.3.9 - Stack Buffer Underflow in LayoutContext

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp.

CVSS 7.5

View Code

CVE-2024-33764 WRITEUP MEDIUM WORKING POC

lunasvg 2.3.9 - Stack Overflow in Element Handler

lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h.

CVSS 5.5

View Code

CVE-2024-33766 WRITEUP MEDIUM WORKING POC

lunasvg 2.3.9 - Denial of Service via Floating Point Exception in blend_transformed_tiled_argb

lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0.

CVSS 5.3

View Code

CVE-2024-33767 WRITEUP MEDIUM WORKING POC

lunasvg 2.3.9 - Out-of-bounds Read in composition_solid_source

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source.

CVSS 5.0

View Code

CVE-2024-33768 WRITEUP CRITICAL WORKING POC

lunasvg 2.3.9 - Segmentation Violation in composition_solid_source_over

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.

CVSS 9.8

View Code