python-pillow: Buffer over-read in SGI RLE image reader

A flaw was found in python-pillow. SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

python-pillow: Buffer over-read in PCX image reader

A flaw was found in python-pillow. The PcxDecode in Pillow has a buffer over-read when decoding a crafted PCX file due to the user-supplied stride value trusted for buffer calculations. The highest threat from this vulnerability is to system availability...

PT-2021-6114 · Tp Link · Tp-Link Ac1750

Name of the Vulnerable Software and Affected Versions: TP-Link AC1750 version 1.1.4 Build 20211022 rel.591035553 Description: The issue is related to a read past the end of an allocated buffer in the NetUSB.ko module, which can be exploited by network-adjacent attackers to execute arbitrary code ...

The vulnerability of the `epsonds_net_read` function in the `epsonds-net.c` API of the SANE scanning device allows a hacker to access confidential data by reading beyond the allowed buffer size.

The vulnerability of the epsondsnetread function in the epsonds-net.c API of the SANE scanning device involves reading data beyond the permissible buffer size. Exploiting this vulnerability could allow an attacker to access confidential data...

The vulnerability of the print_prefix function in tcpdump software for network traffic analysis, related to reading data beyond the buffer’s allowed limits, allows a hacker to gain access to confidential data.

The vulnerability of the printprefix function in software for analyzing network traffic using tcpdump relates to reading data from within allowable buffer limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

The vulnerability of the rasteropGeneralLow component in the Leptonica image processing library, which involves reading data beyond the permissible buffer limits, allows attackers to cause service failures.

The vulnerability of the rasteropGeneralLow component in the Leptonica image processing library involves reading data beyond the permissible buffer size. Exploiting this vulnerability can allow a malicious actor to cause service failures...

多款Qualcomm产品缓冲区错误漏洞

Qualcomm QCA6574AU and others are products of Qualcomm Incorporated Qualcomm.QCA6574AU is a central processing unit CPU product.APQ8017 is a central processing unit CPU product.SDX55 is a modem.Qualcomm QCA6574AU is a central processing unit CPU product.APQ8017 is a central processing unit CPU...

The vulnerability of the tcpdump software for analyzing network traffic lies in the reading of data beyond the buffer’s acceptable limits, which allows a hacker to cause a service failure.

The vulnerability of the tcpdump software for analyzing network traffic is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Exiv2 metadata management library, related to the execution of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Exiv2 metadata management library is related to the execution of operations outside the buffer in memory due to errors in metadata writing. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of the hw/scsi/scsi-generic.c component of the QEMU hardware emulation software, related to reading data beyond the buffer’s acceptable limits, allows a malicious actor to cause a service failure.

The vulnerability of the hw/scsi/scsi-generic.c component of the QEMU hardware emulation software is related to reading data from within acceptable buffer limits. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the server-based Redmine project and task management web application lies in its ability to read data beyond the allowed buffer size limits, allowing an attacker to compromise the integrity of the data.

The vulnerability of the server-based Redmine project and task management web application is related to incorrect data processing during the formatting of tasks. Exploiting this vulnerability allows an attacker to compromise the integrity of the data...

The vulnerability of the Nef polygon function in the CGAL computational geometry algorithm library, which involves reading data beyond the permissible buffer limits, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Nef polygon function in the CGAL computational geometry algorithm library is related to reading data beyond the permissible buffer size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause servi...

The vulnerability of the driver of the QEMU hardware emulation controller arises from reading data beyond the permissible buffer limits. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the driver of the QEMU hardware emulation controller lies in reading data from within allowable buffer limits. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the block/iscsi.c component of the QEMU hardware emulation software involves reading data beyond the allowed buffer limits, allowing an attacker to access confidential data.

The vulnerability in the block/iscsi.c component of the QEMU hardware emulation software involves reading data from beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data...

The vulnerability of the Nef polygon function in the CGAL computational geometry algorithm library, which involves reading data beyond the permissible buffer limits, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Nef polygon function in the CGAL computational geometry algorithm library is related to reading data beyond the permissible buffer size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause servi...

The vulnerability of the sd_wp_addr component of the emulation software for hardware devices on other platforms, related to reading data beyond the buffer’s acceptable limits, allows a malicious actor to cause a service failure.

The vulnerability of the sdwpaddr component of the hardware emulation software for other platforms supported by QEMU lies in its ability to read data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Jp2Image::readMetadata() function in the jp2image.cpp component of the Exiv2 media metadata management library is related to the occurrence of operations outside the buffer in memory. This vulnerability allows an attacker to access confidential data and also trigger a service failure.

The vulnerability of the Jp2Image::readMetadata function in the jp2image.cpp component of the Exiv2 media metadata management library is related to an improper check on the rawData.size property. Exploiting this vulnerability could allow a remote attacker to access confidential data, as well as...

CVE-2021-30306

Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30304

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity...

CVE-2021-1980

Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...