DEBIAN-CVE-2019-6286

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar issue to CVE-2018-11693...

PT-2019-18072 · Sass +2 · Libsass +2

Name of the Vulnerable Software and Affected Versions: LibSass version 3.5.5 Description: A heap-based buffer over-read exists in the Sass::Prelexer::alternatives function in prelexer.hpp. Recommendations: For LibSass version 3.5.5, consider updating to a newer version to mitigate the risk,...

PT-2019-1678 · Red Hat +5 · Elfutils +6

Name of the Vulnerable Software and Affected Versions: elfutils version 0.175 Description: A heap-based buffer over-read was discovered in the elf32 xlatetom function in libelf. This issue can be triggered by a crafted ELF input, causing a segmentation fault that leads to a denial of service...

perl: Heap-based buffer read overflow in S_grok_bslash_N()

Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory...

UBUNTU-CVE-2019-3572

An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call to pngwriterow in libpng, an out-of-bounds write might occur for some memory...

PT-2019-16622 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.2 Description: The issue is related to a heap-based buffer over-read in the load jpeg function, located in the loader.c file. This can be demonstrated by using img2sixel. Recommendations: For libsixel version 1.8.2,...

CVE-2018-20618

ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the okmodecode2 function in okmo.c...

PT-2018-15481 · Ok File Formats · Ok-File-Formats

Name of the Vulnerable Software and Affected Versions: ok-file-formats versions prior to 2018-10-16 Description: The issue is related to a heap-based buffer over-read in the ok mo decode2 function located in ok mo.c. Recommendations: For versions prior to 2018-10-16, at the moment, there is no...

UBUNTU-CVE-2018-20552

Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c...

UBUNTU-CVE-2018-20536

There is a heap-based buffer over-read at liblas::SpatialReference::GetGTIF spatialreference.cpp in libLAS 1.8.1 that will cause a denial of service...

PT-2018-15425 · Aqua Security +3 · Tcpreplay +3

Name of the Vulnerable Software and Affected Versions: Tcpreplay versions prior to 4.3.1 Description: The issue is a heap-based buffer over-read in the packet2tree function located in tree.c. This indicates a problem where more data is read from a buffer than it actually contains, potentially...

libLAS Heap Buffer Over-Read Vulnerability

libLAS is a C/C++ library for reading and writing the common LAS LiDAR format. A heap buffer over-read vulnerability exists in liblas::SpatialReference::GetGTIF spatialreference.cpp in libLAS 1.8.1. An attacker could exploit this vulnerability to cause a denial of service...

PT-2018-15426 · Tcpreplay +3 · Tcpreplay +3

Name of the Vulnerable Software and Affected Versions: Tcpreplay versions prior to 4.3.1 Description: The issue is a heap-based buffer over-read in the get l2len function located in common/get.c. This occurs in Tcpreplay before version 4.3.1. Recommendations: For versions prior to 4.3.1, update t...

UBUNTU-CVE-2018-20453

The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...

DEBIAN-CVE-2018-20451

The processfile function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...

DEBIAN-CVE-2018-20453

The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...

UBUNTU-CVE-2018-20451

The processfile function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...

UBUNTU-CVE-2018-20409

An issue was discovered in Bento4 1.5.1-627. There is a heap-based buffer over-read in AP4AvccAtom::Create in Core/Ap4AvccAtom.cpp, as demonstrated by mp42hls...

PT-2021-10987 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 1.0.1 Description: An issue was discovered in the abst box read function in box code adobe.c, which has a heap-based buffer over-read. Recommendations: For versions prior to 1.0.1, update to version 1.0.1 or later to...

DEBIAN-CVE-2018-20185

In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits...