12 results · Feed
-
Low 2.9
In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
-
Low 2.9
In uriparser before 1.0.2, there is pointer difference truncation to int in various places.
-
Medium 5.1
uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in…
-
Low 2.9
uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc wit…
-
Medium 5.9
An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a …
-
High 8.6
An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long k…
-
Unscored —
An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMake…
-
Unscored —
An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.
-
Unscored —
URI_FUNC() in UriParse.c in uriparser before 0.9.1 has an out-of-bounds read (in uriParse*Ex* functions) for an incompl…
-
Unscored —
An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an integer overflow via a uriComposeQuery* or uriC…
-
Unscored —
An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an out-of-bounds write via a uriComposeQuery* or u…
-
Unscored —
An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriReset…