The vulnerability of the DecodeAdpcmImaQT function (modules/codec/adpcm.c) in the VideoLAN VLC media player software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the DecodeAdpcmImaQT function modules/codec/adpcm.c in the VideoLAN VLC media player lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure using a specially...

The vulnerability of the VideoLAN VLC media player, which arises from reading data beyond the buffer in memory, allows a hacker to cause a system failure.

The vulnerability of the VideoLAN VLC media player arises from reading data beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause the code to fail by using a specially created .wmv file...

The vulnerability of the VideoLAN VLC media player lies in the fact that operations are performed outside the buffer in memory, allowing an attacker to execute arbitrary code or cause a service failure.

The vulnerability of the VideoLAN VLC media player lies in the fact that the operation data is stored outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially created .3GP file...

EulerOS 2.0 SP3 : libjpeg-turbo (EulerOS-SA-2019-2251)

According to the versions of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execu...

CVE-2017-0393

A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1,...

Amazon Linux 2 : libjpeg-turbo (ALAS-2019-1350)

The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute arbitrary code via a crafted file.CVE-2016-3616 A divide by zero vulnerability has been discovered in libjpeg-turbo in allocsarray function of jmemmgr.c file...

libvorbis: heap buffer overflow in mapping0_forward function

A heap-based buffer overflow was found in the encoder functionality of the libvorbis library. An attacker could create a malicious file to cause a denial of service, crashing the application containing the library...

Aida64 6.10.5200 - Buffer Overflow (SEH) Exploit

Exploit Title: Aida64 6.10.5200 - Buffer Overflow SEH Exploit Author: 8-Team / daejinoh Vendor Homepage: https://www.aida64.com Software Link: https://www.aida64.com/downloads/OTAwMmVmNTE= Version: AIDA64 Enginner 6.10.5200 Tested on: Windows 7 Home Basic SP1 CVE : N/A Step 1 File - Preferences -...

Unspecified Vulnerability in Apple Xcode LLVM Component

Apple Xcode is the United States Apple Apple company's set of integrated development environment for developers, it is mainly used for the development of Mac OS X and iOS applications. LLVM Low Level Virtual Machine is a set of LLVM team developed a framework for framing the compiler compiler...

Medium: libjpeg-turbo

Issue Overview: The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute arbitrary code via a crafted file.CVE-2016-3616 A divide by zero vulnerability has been discovered in libjpeg-turbo in allocsarray function o...

The vulnerability in the web interface of TP-Link’s router software, TL-WR1043ND, allows a hacker to gain full control over the device.

The vulnerability of the web interface for TP-Link TL-WR1043ND microprogramming device lies in the deficiencies of its authentication procedures. Exploiting this vulnerability allows a malicious actor to gain full control over the device by sending a specially crafted file...

Amazon Linux 2 : mercurial (ALAS-2019-1328)

An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function beuint32read located in endianrw.h. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly have unspecified...

Amazon Linux 2 : exiv2 (ALAS-2019-1339)

An integer underflow, leading to heap-based out-of-bound read, was found in the way Exiv2 library prints IPTC Photo Metadata embedded in an image. By persuading a victim to open a crafted image, a remote attacker could crash the application or possibly retrieve a portion of memory.CVE-2017-17724...

The vulnerability of the Windows Jet Database Engine component allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine component in the operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...

Stack overflow

A stack-based buffer overflow in the processPrivilage function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers serving firewall configuration files to achieve Remote Code Execution or Denial Of Service via a crafted file...

Low: advancecomp

Issue Overview: An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function beuint32read located in endianrw.h. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly ha...

Low: exiv2

Issue Overview: An integer underflow, leading to heap-based out-of-bound read, was found in the way Exiv2 library prints IPTC Photo Metadata embedded in an image. By persuading a victim to open a crafted image, a remote attacker could crash the application or possibly retrieve a portion of...

NSA Ghidra DLL Hijacking Vulnerability

NSA Ghidra is an open source reverse engineering tool from the National Security Agency NSA. A DLL hijacking vulnerability exists in NSA Ghidra versions prior to 9.0.2, which originates when Ghidra loads jansi.dll from the current working directory, which can be exploited to execute arbitrary cod...

PT-2020-18909 · Samsung +1 · Fsck.F2Fs +1

Name of the Vulnerable Software and Affected Versions: fsck.f2fs version 1.12.0 Description: A code execution issue exists in the file system checking functionality due to a logic flaw and out-of-bounds heap operations. This can be triggered by a specially crafted f2fs file, allowing an attacker ...

CVE-2019-8383

An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function advpngunfilter8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly have unspecified other...