CVE-2019-10488: NULL Pointer Dereference

Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206,...

PT-2019-11881

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9150 Qualcomm Snapdragon Compute versions MDM9150 Qualcomm Snapdragon Consumer IOT versions MDM9150 Qualcomm Snapdragon Industrial IOT versions MDM9150 Qualcomm Snapdragon IoT versions MDM9150 Qualcomm...

Null pointer dereference

Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206, MDM9607, MSM8909W, MSM8996AU,...

CVE-2019-10489

Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206, MDM9607, MSM8909W, MSM8996AU,...

CVE-2019-10489

CVE-2019-10489 involves a possible null-pointer dereference when parsing an AVI clip during copy in Qualcomm Snapdragon drivers across many Snapdragon products. Root cause: null pointer in parsing/copy path. Impact: high, with potential crash (availability) and no confidentiality/integrity impact...

CVE-2019-10489: NULL Pointer Dereference

Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206, MDM9607, MSM8909W, MSM8996AU,...

PT-2019-11882

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9206 Qualcomm Snapdragon Compute versions MDM9206 Qualcomm Snapdragon Consumer IOT versions MDM9206 Qualcomm Snapdragon Industrial IOT versions MDM9206 Qualcomm Snapdragon IoT versions MDM9206 Qualcomm...

CVE-2019-2322

Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206,...

Null pointer dereference

Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650...

Buffer overflow

Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650,...

CVE-2019-2327: Improper Restriction of Operations within the Bounds of a Memory Buffer

Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650,...

CVE-2019-2334: NULL Pointer Dereference

Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650...

CVE-2019-2322: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206,...

PT-2019-16398

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9150 through SD 855 Qualcomm Snapdragon Compute versions MDM9150 through SD 855 Qualcomm Snapdragon Consumer IOT versions MDM9150 through SD 855 Qualcomm Snapdragon Industrial IOT versions MDM9150 through S...

PT-2019-16391

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9150 Qualcomm Snapdragon Compute versions MDM9150 Qualcomm Snapdragon Consumer IOT versions MDM9150 Qualcomm Snapdragon Industrial IOT versions MDM9150 Qualcomm Snapdragon IoT versions MDM9150 Qualcomm...

Use After Free

mozilla Firefox is vulnerable to use-after-free vulnerability. This occurs while enumerating attributes during SVG animations with clip paths leading to application crashes...

Poppler null pointer dereference vulnerability (CNVD-2019-14281)

Poppler is a C++ class library for generating PDF, the library is inherited from Xpdf PDF reader. Poppler 0.74.0 version of the splash/SplashClip.cc file of the 'SplashClip::clipAALine' function of the null pointer back-reference vulnerability, the vulnerability stems from the network system or...

DEBIAN-CVE-2019-10873

An issue was discovered in Poppler 0.74.0. There is a NULL pointer dereference in the function SplashClip::clipAALine at splash/SplashClip.cc...

openSUSE Security Update : ImageMagick (openSUSE-2019-419)

This update for ImageMagick to version 7.0.7-34 fixes the following issues : The following security issue was fixed : - Fixed numerous use of uninitialized values, integer overflow, memory exceeded, and timeouts. The following non-security issues were fixed : - Added support for reading eXIf chun...

rdesktop out-of-bounds read vulnerability (CNVD-2019-07806)

rdesktop is an open source UNIX client for connecting to Windows Remote Desktop Services. An out-of-bounds read vulnerability exists in the uicliphandledata function in rdesktop 1.8.3 and earlier versions, which can be exploited by an attacker to obtain information...