CVE-2019-15784

Secure Reliable Transport SRT through 1.3.4 has a CSndUList array overflow if there are many SRT connections...

PT-2019-14393

Name of the Vulnerable Software and Affected Versions SRT versions through 1.3.4 Description The issue is related to an array overflow in the CSndUList, which occurs when there are multiple SRT connections. Recommendations For versions through 1.3.4, consider limiting the number of SRT connection...

CVE-2019-15784: Improper Validation of Array Index

Secure Reliable Transport SRT through 1.3.4 has a CSndUList array overflow if there are many SRT connections...

PT-2019-6494

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.20 Description The issue is related to an off-by-one bug in the net/netlabel/netlabel cipso v4.c file of the Linux kernel, which can cause an overflow of the doi def-tags array. Recommendations For Linux kern...

CVE-2019-10245

In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load...

CVE-2018-19020

When CX-Supervisor Versions 3.42 and prior processes project files and tampers with the value of an offset, an attacker can force the application to read a value outside of an array...

CVE-2018-19020

When CX-Supervisor Versions 3.42 and prior processes project files and tampers with the value of an offset, an attacker can force the application to read a value outside of an array...

CVE-2018-11302

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, lack of check of input received from userspace before copying into buffer can lead to potential array overflow in WLAN...

Buffer overflow

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, lack of check of input received from userspace before copying into buffer can lead to potential array overflow in WLAN...

CVE-2018-11302

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, lack of check of input received from userspace before copying into buffer can lead to potential array overflow in WLAN...

CVE-2018-11302

CVE-2018-11302 corresponds to a WLAN buffer overflow issue described in Qualcomm CAF Android variants (Android for MSM, Firefox OS for MSM, QRD Android) where input from userspace could be copied into a kernel buffer without proper validation. The CVE is listed under the Qualcomm component mappin...

CVE-2018-11302: Improper Input Validation

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, lack of check of input received from userspace before copying into buffer can lead to potential array overflow in WLAN...

PT-2018-10468

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue is related to a lack of input validation from userspace before copying data in...

Mozilla: Integer overflow and out-of-bounds write in Skia

An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes. This could lead to a potentially exploitable crash triggerable by web content. This vulnerability affects Thunderbird 52.8,...

CVE-2017-8251

CVE-2017-8251 affects Qualcomm camera driver components in Android CAF builds on Linux kernels. The bug arises when msm_isp_check_stream_cfg_cmd and msm_isp_stats_update_cgc_override fail to validate stream_cfg_cmd->num_streams, allowing an overflow of stream_cfg_cmd->stream_handle. The CVE...

PT-2017-18237

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is related to the msm isp check stream cfg cmd and msm isp stats update cgc override functions, where the stream cfg...

Citrix XenServer QEMU ioport Array Overflow Guest-to-Host Privilege Escalation (CTX219136)

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by a privilege escalation vulnerability in the QEMU ioport component due to an array overflow that is triggered during the handling of addresses in ioport read and write look-ups. A...

qemu ioport array overflow

ISSUE DESCRIPTION The code in qemu which implements ioport read/write looks up the specified ioport address in a dispatch table. The argument to the dispatch function is a uint32t, and is used without a range check, even though the table has entries for only 2^16 ioports. When qemu is used as a...

CVE-2016-9637 - Citrix XenServer Security Update

Description of Problem A security vulnerability has been identified in Citrix XenServer that may allow malicious privileged-mode code running within an HVM guest VM to compromise the host. This vulnerability affects all currently supported versions of Citrix XenServer up to and including Citrix...

CVE-2016-4333

The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to modify the loop's terminator. Due to this, an aggressor can cause the loop's index to point outside the bounds of the...