2176 matches found
UBUNTU-CVE-2018-20451
The processfile function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...
UBUNTU-CVE-2018-20409
An issue was discovered in Bento4 1.5.1-627. There is a heap-based buffer over-read in AP4AvccAtom::Create in Core/Ap4AvccAtom.cpp, as demonstrated by mp42hls...
PT-2021-10987 · Gpac +1 · Gpac +1
Name of the Vulnerable Software and Affected Versions: gpac versions prior to 1.0.1 Description: An issue was discovered in the abst box read function in box code adobe.c, which has a heap-based buffer over-read. Recommendations: For versions prior to 1.0.1, update to version 1.0.1 or later to...
DEBIAN-CVE-2018-20185
In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits...
PYSEC-2018-119
There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...
PYSEC-2018-117
There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...
PT-2018-15257 · Exiv2 +5 · Exiv2 +5
Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.27-RC3 Description: A heap-based buffer over-read issue exists in the encodeJp2Header function of jp2image.cpp. This can be triggered by a crafted input, potentially leading to a remote denial of service attack. Recommendation...
DEBIAN-CVE-2018-19839
In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...
ALPINE-CVE-2018-19758
There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of service...
DEBIAN-CVE-2018-19758
There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of service...
DEBIAN-CVE-2018-19756
There is a heap-based buffer over-read at stbimage.h function: stbitgaload in libsixel 1.8.2 that will cause a denial of service...
PT-2018-15072 · Libsixel +1 · Libsixel +1
Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.2 Description: The issue is a heap-based buffer over-read located in the stb image.h file, specifically within the stbi tga load function, which can cause a denial of service. Recommendations: For libsixel version 1.8.2, ...
ALPINE-CVE-2018-19664
libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the putpixelrows function in wrbmp.c, as demonstrated by djpeg...
DEBIAN-CVE-2018-19625
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuffcomposite.c by preventing a heap-based buffer over-read...
UBUNTU-CVE-2018-19758
There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of service...
UBUNTU-CVE-2018-19566
A heap buffer over-read in parsetiffifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information...
UBUNTU-CVE-2018-19541
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0....
CVE-2018-19535
In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunkint.cpp may cause a denial of service application crash due to a heap-based buffer over-read via a crafted PNG file...
curl: Out-of-bounds heap read when missing RTSP headers allows information leak or denial of service
curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have...