# Vulnerabilities published in 2023


- [OSV-2023-1214](https://insights.sbomify.com/OSV-2023-1214/): Heap-buffer-overflow in NetworkInterface::dissectPacket (not scored)
- [OSV-2023-1208](https://insights.sbomify.com/OSV-2023-1208/): Heap-buffer-overflow in ih264d_format_convert (not scored)
- [OSV-2023-1207](https://insights.sbomify.com/OSV-2023-1207/): Heap-buffer-overflow in isvcd_start_of_pic (not scored)
- [OSV-2023-1206](https://insights.sbomify.com/OSV-2023-1206/): Heap-buffer-overflow in ih264d_format_convert (not scored)
- [OSV-2023-1205](https://insights.sbomify.com/OSV-2023-1205/): Heap-buffer-overflow in isvcd_populate_res_prms (not scored)
- [OSV-2023-1203](https://insights.sbomify.com/OSV-2023-1203/): Global-buffer-overflow in dissect_zcl_read_attr_struct (not scored)
- [OSV-2023-1201](https://insights.sbomify.com/OSV-2023-1201/): Negative-size-param in pcpp::RawPacket::insertData (not scored)
- [OSV-2023-1195](https://insights.sbomify.com/OSV-2023-1195/): Security exception in java.base/java.util.HashMap.resize (not scored)
- [OSV-2023-1186](https://insights.sbomify.com/OSV-2023-1186/): Heap-use-after-free in dxf_tables_read (not scored)
- [OSV-2023-1184](https://insights.sbomify.com/OSV-2023-1184/): Global-buffer-overflow in dissect_zcl_read_attr_struct (not scored)
- [OSV-2023-1180](https://insights.sbomify.com/OSV-2023-1180/): Heap-buffer-overflow in ih264d_sev (not scored)
- [OSV-2023-118](https://insights.sbomify.com/OSV-2023-118/): Heap-use-after-free in mrb_gc_mark (not scored)
- [OSV-2023-1179](https://insights.sbomify.com/OSV-2023-1179/): Index-out-of-bounds in iaace_calc_sfb_dist (not scored)
- [OSV-2023-1177](https://insights.sbomify.com/OSV-2023-1177/): Heap-buffer-overflow in Gfx::ICC::TextDescriptionTagData::from_bytes (not scored)
- [OSV-2023-1174](https://insights.sbomify.com/OSV-2023-1174/): Stack-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch (not scored)
- [OSV-2023-1173](https://insights.sbomify.com/OSV-2023-1173/): Heap-buffer-overflow in fill_lines (not scored)
- [OSV-2023-1172](https://insights.sbomify.com/OSV-2023-1172/): Heap-buffer-overflow in pcpp::TLVRecordReader<pcpp::TcpOption>::getTLVRecord (not scored)
- [OSV-2023-1171](https://insights.sbomify.com/OSV-2023-1171/): Heap-buffer-overflow in pcpp::SomeIpSdLayer::SomeIpSdLayer (not scored)
- [OSV-2023-1170](https://insights.sbomify.com/OSV-2023-1170/): UNKNOWN READ in loader_log (not scored)
- [OSV-2023-117](https://insights.sbomify.com/OSV-2023-117/): Heap-buffer-overflow in isvcd_nal_byte_swap_emulation (not scored)
- [OSV-2023-1169](https://insights.sbomify.com/OSV-2023-1169/): Heap-buffer-overflow in epassNUMBER_pkcs15_generate_key (not scored)
- [OSV-2023-1168](https://insights.sbomify.com/OSV-2023-1168/): Heap-buffer-overflow in pcpp::PPP_PPTPLayer::computeCalculateFields (not scored)
- [OSV-2023-1167](https://insights.sbomify.com/OSV-2023-1167/): UNKNOWN WRITE in php_strip_url_passwd (not scored)
- [OSV-2023-1164](https://insights.sbomify.com/OSV-2023-1164/): Heap-buffer-overflow in WriteCLUT (not scored)
- [OSV-2023-1163](https://insights.sbomify.com/OSV-2023-1163/): Invalid-free in sc_file_clear_acl_entries (not scored)
- [OSV-2023-1161](https://insights.sbomify.com/OSV-2023-1161/): Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch (not scored)
- [OSV-2023-1160](https://insights.sbomify.com/OSV-2023-1160/): Heap-buffer-overflow in IEC104Stats::processPacket (not scored)
- [OSV-2023-1154](https://insights.sbomify.com/OSV-2023-1154/): Heap-buffer-overflow in pcpp::SomeIpSdEntry::SomeIpSdEntry (not scored)
- [OSV-2023-1153](https://insights.sbomify.com/OSV-2023-1153/): Heap-buffer-overflow in pcpp::SSLClientHelloMessage::getCipherSuite (not scored)
- [OSV-2023-1152](https://insights.sbomify.com/OSV-2023-1152/): Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr (not scored)
- [OSV-2023-1150](https://insights.sbomify.com/OSV-2023-1150/): Heap-buffer-overflow in pcpp::computeChecksum (not scored)
- [OSV-2023-1149](https://insights.sbomify.com/OSV-2023-1149/): Heap-buffer-overflow in bit_read_fixed (not scored)
- [OSV-2023-1147](https://insights.sbomify.com/OSV-2023-1147/): Heap-buffer-overflow in parse_by_block_type (not scored)
- [OSV-2023-1146](https://insights.sbomify.com/OSV-2023-1146/): Negative-size-param in pcpp::RawPacket::insertData (not scored)
- [OSV-2023-1145](https://insights.sbomify.com/OSV-2023-1145/): Heap-buffer-overflow in pcpp::GREv1Layer::computeCalculateFields (not scored)
- [OSV-2023-1140](https://insights.sbomify.com/OSV-2023-1140/): Heap-buffer-overflow in H5MM_strdup (not scored)
- [OSV-2023-1136](https://insights.sbomify.com/OSV-2023-1136/): Security exception in org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord (not scored)
- [OSV-2023-1135](https://insights.sbomify.com/OSV-2023-1135/): Segv on unknown address in flb_sds_cat_safe (not scored)
- [OSV-2023-113](https://insights.sbomify.com/OSV-2023-113/): Stack-buffer-overflow in dump_stats (not scored)
- [OSV-2023-1129](https://insights.sbomify.com/OSV-2023-1129/): UNKNOWN READ in HeifPixelImage::overlay (not scored)
- [OSV-2023-1126](https://insights.sbomify.com/OSV-2023-1126/): Heap-buffer-overflow in iasecc_parse_acls (not scored)
- [OSV-2023-1124](https://insights.sbomify.com/OSV-2023-1124/): UNKNOWN READ in cmsIT8GetDataRowColDbl (not scored)
- [OSV-2023-1122](https://insights.sbomify.com/OSV-2023-1122/): Stack-buffer-overflow in dxf_header_read (not scored)
- [OSV-2023-1119](https://insights.sbomify.com/OSV-2023-1119/): Segv on unknown address in FunctionCompiler::compileReturn (not scored)
- [OSV-2023-1117](https://insights.sbomify.com/OSV-2023-1117/): Heap-buffer-overflow in cmsMLUsetWide (not scored)
- [OSV-2023-1115](https://insights.sbomify.com/OSV-2023-1115/): Use-of-uninitialized-value in fp_uninit (not scored)
- [OSV-2023-1110](https://insights.sbomify.com/OSV-2023-1110/): Stack-buffer-overflow in dynapi_set_helper (not scored)
- [OSV-2023-1104](https://insights.sbomify.com/OSV-2023-1104/): Heap-buffer-overflow in bit_read_RC (not scored)
- [OSV-2023-1103](https://insights.sbomify.com/OSV-2023-1103/): Heap-buffer-overflow in OpenType::be_u32 (not scored)
- [OSV-2023-1101](https://insights.sbomify.com/OSV-2023-1101/): Heap-buffer-overflow in decode_preR13_entities (not scored)
- [OSV-2023-11](https://insights.sbomify.com/OSV-2023-11/): Heap-buffer-overflow in node_from_openstep (not scored)
- [OSV-2023-1099](https://insights.sbomify.com/OSV-2023-1099/): Heap-buffer-overflow in dwg_geojson_object (not scored)
- [OSV-2023-1098](https://insights.sbomify.com/OSV-2023-1098/): Segv on unknown address in ZEND_HANDLE_EXCEPTION_SPEC_HANDLER (not scored)
- [OSV-2023-1097](https://insights.sbomify.com/OSV-2023-1097/): Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst (not scored)
- [OSV-2023-1095](https://insights.sbomify.com/OSV-2023-1095/): Heap-use-after-free in zend_jit_trace_execute (not scored)
- [OSV-2023-1093](https://insights.sbomify.com/OSV-2023-1093/): Stack-buffer-overflow in ndpi_handle_rule (not scored)
- [OSV-2023-1091](https://insights.sbomify.com/OSV-2023-1091/): Heap-buffer-overflow in H5F_addr_decode (not scored)
- [OSV-2023-1088](https://insights.sbomify.com/OSV-2023-1088/): Heap-buffer-overflow in arrow::Status arrow::Result<std::__1::unique_ptr<arrow::Buffer, std::__1::defaul (not scored)
- [OSV-2023-1079](https://insights.sbomify.com/OSV-2023-1079/): Heap-buffer-overflow in Calc_Length (not scored)
- [OSV-2023-1075](https://insights.sbomify.com/OSV-2023-1075/): Segv on unknown address in cleanup_live_vars (not scored)
- [OSV-2023-1073](https://insights.sbomify.com/OSV-2023-1073/): Heap-buffer-overflow in H5D__scatter_mem (not scored)
- [OSV-2023-1072](https://insights.sbomify.com/OSV-2023-1072/): UNKNOWN READ in igraph_strvector_set_len (not scored)
- [OSV-2023-1071](https://insights.sbomify.com/OSV-2023-1071/): Heap-use-after-free in igraph_pajek_yyparse (not scored)
- [OSV-2023-1070](https://insights.sbomify.com/OSV-2023-1070/): Segv on unknown address in igraph_strvector_set_len (not scored)
- [OSV-2023-107](https://insights.sbomify.com/OSV-2023-107/): Heap-buffer-overflow in DecodeBasicOcspResponse (not scored)
- [OSV-2023-1069](https://insights.sbomify.com/OSV-2023-1069/): Heap-use-after-free in igraph_pajek_yyparse (not scored)
- [OSV-2023-1068](https://insights.sbomify.com/OSV-2023-1068/): Heap-buffer-overflow in iasecc_parse_size (not scored)
- [OSV-2023-1063](https://insights.sbomify.com/OSV-2023-1063/): Heap-double-free in dwg_free_object (not scored)
- [OSV-2023-1062](https://insights.sbomify.com/OSV-2023-1062/): Heap-buffer-overflow in H5MM_xstrdup (not scored)
- [OSV-2023-106](https://insights.sbomify.com/OSV-2023-106/): UNKNOWN WRITE in sudo_lbuf_append_quoted_v1 (not scored)
- [OSV-2023-1051](https://insights.sbomify.com/OSV-2023-1051/): Heap-buffer-overflow in dwg_json_VPORT_private (not scored)
- [OSV-2023-1050](https://insights.sbomify.com/OSV-2023-1050/): Heap-buffer-overflow in H5D__scatter_mem (not scored)
- [OSV-2023-1048](https://insights.sbomify.com/OSV-2023-1048/): Heap-buffer-overflow in decode_preR13_entities (not scored)
- [OSV-2023-104](https://insights.sbomify.com/OSV-2023-104/): Heap-buffer-overflow in H5FS__sect_link (not scored)
- [OSV-2023-1033](https://insights.sbomify.com/OSV-2023-1033/): Heap-buffer-overflow in Gfx::InputStreamer::read_u32 (not scored)
- [OSV-2023-1024](https://insights.sbomify.com/OSV-2023-1024/): Security exception in org.apache.poi.util.IOUtils.safelyAllocate (not scored)
- [OSV-2023-102](https://insights.sbomify.com/OSV-2023-102/): Segv on unknown address in ndpi_free_flow_data (not scored)
- [OSV-2023-1016](https://insights.sbomify.com/OSV-2023-1016/): Use-of-uninitialized-value in Render_Single_Pass (not scored)
- [OSV-2023-1014](https://insights.sbomify.com/OSV-2023-1014/): Security exception in org.jsoup.parser.HtmlTreeBuilder.process (not scored)
- [OSV-2023-1012](https://insights.sbomify.com/OSV-2023-1012/): Global-buffer-overflow in iusace_quantize_lines (not scored)
- [OSV-2023-101](https://insights.sbomify.com/OSV-2023-101/): Heap-use-after-free in pci_enum (not scored)
- [OSV-2023-1009](https://insights.sbomify.com/OSV-2023-1009/): Security exception in net.jsign.bouncycastle.asn1.ASN1StreamParser.readVector (not scored)
- [OSV-2023-1008](https://insights.sbomify.com/OSV-2023-1008/): Heap-use-after-free in gx_image_enum_begin (not scored)
- [OSV-2023-1004](https://insights.sbomify.com/OSV-2023-1004/): Heap-buffer-overflow in ndpi_snprintf (not scored)
- [OSV-2023-1002](https://insights.sbomify.com/OSV-2023-1002/): Heap-buffer-overflow in iasecc_parse_get_tlv (not scored)
- [OSV-2023-1001](https://insights.sbomify.com/OSV-2023-1001/): Security exception in java.base/java.lang.String.repeat (not scored)
- [OSV-2023-1000](https://insights.sbomify.com/OSV-2023-1000/): Heap-use-after-free in xmlParserPrintFileContextInternal (not scored)
- [OSV-2022-1277](https://insights.sbomify.com/OSV-2022-1277/): Heap-use-after-free in mk_event_timeout_destroy (not scored)
- [OSV-2022-1276](https://insights.sbomify.com/OSV-2022-1276/): Stack-buffer-overflow in ntlm_phase_3 (not scored)
- [OSV-2022-1275](https://insights.sbomify.com/OSV-2022-1275/): Security exception in java.desktop/java.awt.image.DataBufferInt.<init> (not scored)
- [MAL-2023-999](https://insights.sbomify.com/MAL-2023-999/): Malicious code in yellowbrain (npm) (malicious package)
- [MAL-2023-998](https://insights.sbomify.com/MAL-2023-998/): Malicious code in yb-trust-butils (npm) (malicious package)
- [MAL-2023-997](https://insights.sbomify.com/MAL-2023-997/): Malicious code in yb-mongoengine (npm) (malicious package)
- [MAL-2023-996](https://insights.sbomify.com/MAL-2023-996/): Malicious code in yasap-lodash (npm) (malicious package)
- [MAL-2023-995](https://insights.sbomify.com/MAL-2023-995/): Malicious code in yandex-yt-yson-bindings (npm) (malicious package)
- [MAL-2023-994](https://insights.sbomify.com/MAL-2023-994/): Malicious code in yandex-yt-transfer-manager-client (npm) (malicious package)
- [MAL-2023-993](https://insights.sbomify.com/MAL-2023-993/): Malicious code in yandex-yt-proto (npm) (malicious package)
- [MAL-2023-992](https://insights.sbomify.com/MAL-2023-992/): Malicious code in yandex-yt-driver-rpc-bindings (npm) (malicious package)
- [MAL-2023-991](https://insights.sbomify.com/MAL-2023-991/): Malicious code in yandex-text-processing (npm) (malicious package)
- [MAL-2023-990](https://insights.sbomify.com/MAL-2023-990/): Malicious code in yandex-sendlinksms (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/8/