UBUNTU-CVE-2019-7574

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMAADPCMdecode in audio/SDLwave.c...

UBUNTU-CVE-2019-7575

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MSADPCMdecode in audio/SDLwave.c...

DEBIAN-CVE-2019-7575

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MSADPCMdecode in audio/SDLwave.c...

ALPINE-CVE-2019-7575

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MSADPCMdecode in audio/SDLwave.c...

PT-2019-5612

Name of the Vulnerable Software and Affected Versions Simple DirectMedia Layer versions 1.2.15 and earlier Simple DirectMedia Layer versions 2.x through 2.0.9 Description The issue is related to a heap-based buffer over-read in the IMA ADPCM decode function, located in audio/SDL wave.c, which can...

PT-2019-5613

Name of the Vulnerable Software and Affected Versions SDL versions 1.2.15 and earlier SDL versions 2.x through 2.0.9 Description The issue is related to a heap-based buffer overflow in the MS ADPCM decode function of the Simple DirectMedia Layer library, located in audio/SDL wave.c. This can be...

Python Flask Cookie Signer

This is a generic module which can manipulate Python Flask-based application cookies. The Retrieve action will connect to a web server, grab the cookie, and decode it. The Resign action will do the same as above, but after decoding it, it will replace the contents with that in NEWCOOKIECONTENT,...

CVE-2018-11998

While processing a packet decode request in MQTT, Race condition can occur leading to an out-of-bounds access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 427, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660, SnapdragonHighMed2016...

CVE-2018-11998: Concurrent Execution using Shared Resource with Improper Synchronization

While processing a packet decode request in MQTT, Race condition can occur leading to an out-of-bounds access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 427, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660, SnapdragonHighMed2016...

PT-2019-1897

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.40 PHP versions 7.x prior to 7.1.26 PHP versions 7.2.x prior to 7.2.14 PHP versions 7.3.x prior to 7.3.1 Description The issue is related to the xmlrpc decode function in PHP, which contains an error that leads to...

openvswitch: Buffer over-read in lib/ofp-actions.c:decode_bundle()

An issue was discovered in Open vSwitch OvS 2.5.x through 2.5.5, 2.6.x through 2.6.3, 2.7.x through 2.7.6, 2.8.x through 2.8.4, and 2.9.x through 2.9.2 where the decodebundle function inside lib/ofp-actions.c is affected by a buffer over-read issue during BUNDLE action decoding. A specially craft...

openvswitch: Buffer over-read in lib/ofp-actions.c:decode_bundle()

An issue was discovered in Open vSwitch OvS 2.5.x through 2.5.5, 2.6.x through 2.6.3, 2.7.x through 2.7.6, 2.8.x through 2.8.4, and 2.9.x through 2.9.2 where the decodebundle function inside lib/ofp-actions.c is affected by a buffer over-read issue during BUNDLE action decoding. A specially craft...

Denial Of Service (DoS)

msgpack is vulnerable to denial of service. The default decode limits is too large, which will allow an attacker to deplete available resource and cause the process to crash...

PT-2019-16621 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.2 Description: The issue is related to an infinite loop in the sixel decode raw impl function, located in the fromsixel.c file. This has been demonstrated using sixel2png. Recommendations: For libsixel version 1.8.2,...

CVE-2018-20616

ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the okwavdecodemsadpcmdata function in okwav.c...

PT-2018-15479

Name of the Vulnerable Software and Affected Versions ok-file-formats versions prior to 2018-10-16 Description The issue is related to a heap-based buffer overflow in the ok wav decode ms adpcm data function in ok wav.c. Recommendations For versions prior to 2018-10-16, update to a version releas...

PT-2018-2551

Name of the Vulnerable Software and Affected Versions libcurl versions 7.36.0 through 7.64.0 Description The issue is caused by an integer overflow in the ntlm decode type2 target function, which handles incoming NTLM type-2 messages. This function does not validate incoming data correctly, leadi...

Google Android Buffer Overflow Vulnerability (CNVD-2019-27578)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An out-of-bounds write vulnerability exists in the 'impdinitdrcdecodepostconfig' function of the impddrcgaindecoder.c file in Android version 9, which stems from a boundary check...

PT-2018-15229

Name of the Vulnerable Software and Affected Versions Libav version 12.3 Description The issue is related to a floating point exception in the range decode culshift function, which is called from range decode bits in libavcodec/apedec.c. This can lead to a remote denial of service when the softwa...

Google Android elevation of privilege vulnerability (CNVD-2018-26777)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the V4L2SliceVideoDecodeAccelerator::Dequeue in the v4l2slicevideodecodeaccelerator.cc file in Android versions 8.1 and 9, which...