The vulnerability of the Firefox browser, related to the execution of operations beyond the data buffer, allows attackers to execute arbitrary code.

The vulnerability of the Firefox browser is related to the execution of operations beyond the data buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Input validation

In FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r351265, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before 11.2-RELEASE-p14, the kernel driver for /dev/midistat implements a read handler that is not thread-safe. A multi-threaded program c...

FreeBSD-SA-19:23.midi

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-19:23.midi Security Advisory The FreeBSD Project Topic: kernel memory disclosure from /dev/midistat Category: core Module: sound Announced: 2019-08-20 Credits:...

exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file...

UBUNTU-CVE-2019-13959

In Bento4 1.5.1-627, AP4DataBuffer::SetDataSize does not handle reallocation failures, leading to a memory copy into a NULL pointer. This is different from CVE-2018-20186...

CVE-2019-13959

CVE-2019-13959 affects Bento4 1.5.1-627. The issue is in AP4_DataBuffer::SetDataSize where reallocation failures are not handled, causing a memory copy into a NULL pointer. Related sources (CNVD-2019-28473, RH/SOSV/UBUNTU entries) describe this as a null-pointer dereference that can lead to a cra...

Yubico Security Keys with a Crypto Flaw

Wow, is this an embarrassing bug: Yubico is recalling a line of security keys used by the U.S. government due to a firmware flaw. The company issued a security advisory today that warned of an issue in YubiKey FIPS Series devices with firmware versions 4.4.2 and 4.4.4 that reduced the randomness ...

The vulnerability of the data buffer in Intel’s microprogramming software allows a hacker to gain access to confidential information.

The vulnerability of the MSBDS microprogramming system’s data buffer relates to the improper implementation of micro-optimization measures aimed at improving the efficiency of data writing to RAM. Exploiting this vulnerability allows an attacker to gain access to confidential information...

The vulnerability of Mutt and NeoMutt email clients, related to the execution of operations outside the data buffer, allows attackers to cause service failures.

The vulnerability in the imap/message.c file of the Mutt and NeoMutt email clients relates to the execution of operations outside the data buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

UBUNTU-CVE-2018-20502

An issue was discovered in Bento4 1.5.1-627. There is an attempt at excessive memory allocation in the AP4DataBuffer class when called from AP4HvccAtom::Create in Core/Ap4HvccAtom.cpp...

UBUNTU-CVE-2018-20186

An issue was discovered in Bento4 1.5.1-627. AP4Sample::ReadData in Core/Ap4Sample.cpp allows attackers to trigger an attempted excessive memory allocation, related to AP4DataBuffer::SetDataSize and AP4DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp...

Exiv2 Buffer Overflow Vulnerability (CNVD-2019-07082)

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A heap buffer overflow vulnerability exists in the Exiv2::tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27-RC3, which can be exploited by a remote attacker via specially crafted input to cause a denial...

UBUNTU-CVE-2018-14780

An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function ykpivfetchobject: % highlight c % ifsw == SWSUCCESS sizet outlen; int offs = ykpivgetlengthdata + 1, &outlen; ifoffs == 0 return YKPIVSIZEERROR;...

Bento4 Denial of Service Vulnerability (CNVD-2018-14560)

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in AP4DataBuffer::SetData in the Core/Ap4DataBuffer.cpp file in Bento4 version 1.5.1-624. An attacker can exploit the vulnerability to cause a denial of service null pointer backreference...

UBUNTU-CVE-2018-14588

An issue has been discovered in Bento4 1.5.1-624. A NULL pointer dereference can occur in AP4DataBuffer::SetData in Core/Ap4DataBuffer.cpp...

CVE-2017-13257

In btapandatabufindcback of btapanact.cc there is a use after free that can result in an out of bounds read of memory allocated via malloc. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android...

PYSEC-2018-148

In the DataBuf class in include/exiv2/types.hpp in Exiv2 0.26, an issue exists in the constructor with an initial buffer size. A large size value may lead to a SIGABRT during an attempt at memory allocation. NOTE: some third parties have been unable to reproduce the SIGABRT when using the...

PYSEC-2018-148

In the DataBuf class in include/exiv2/types.hpp in Exiv2 0.26, an issue exists in the constructor with an initial buffer size. A large size value may lead to a SIGABRT during an attempt at memory allocation. NOTE: some third parties have been unable to reproduce the SIGABRT when using the...

Apple macOS HighSierra 10.13 - ctl_ctloutput-leak Information Leak Exploit

Exploit for macOS platform in category local exploits / ctlctloutput-leak.c Brandon Azad CVE-2017-13868 While looking through the source code of XNU version 4570.1.46, I noticed that the function ctlctloutput in the file bsd/kern/kerncontrol.c does not check the return value of sooptcopyin, which...

UBUNTU-CVE-2017-14646

The AP4AvccAtom and AP4HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a heap-based buffer over-read and application crash in AP4DataBuffer::SetData in Core/Ap4DataBuffer.cpp...