PT-2019-5512 · Openslp +5 · Openslp +6

Name of the Vulnerable Software and Affected Versions: VMware ESXi and Horizon DaaS affected versions not specified Description: The issue is related to a heap overwrite problem in OpenSLP as used in ESXi and the Horizon DaaS appliances. This can potentially allow a remote attacker to impact the...

Wind River Systems VxWorks Buffer Overflow Vulnerability (CNVD-2019-25704)

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A buffer error vulnerability exists in the DHCP Offer/ACK parsing of ipdhcpc in Wind River Systems VxWorks. An attacker could exploit this vulnerability to overwrite the heap and execute code...

CVE-2018-5861

CVE-2018-5861 is documented as a heap-overflow risk in CAF Android bootloader code using the Linux kernel, affecting Android for MSM/QRD Android builds with Qualcomm bootloaders. The vulnerability arises from incomplete partition-size checks during loading of secure applications, with CVSS v3.0 i...

CVE-2018-5861

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, existing checks in place on partition size are incomplete and can lead to heap overwrite vulnerabilities while loading a secure application from the boot loader...

CVE-2018-5861

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, existing checks in place on partition size are incomplete and can lead to heap overwrite vulnerabilities while loading a secure application from the boot loader...

UBUNTU-CVE-2018-15688

A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239...

Google Android Qualcomm WLAN Heap Override Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with Qualcomm WLAN being one of the components used. Qualcomm WLAN is a wireless LAN component developed by Qualco...

Heap overflow

In wmandpendresponseeventhandler, the variable lenendrsp is a uint32 which can be overflowed if the value of variable "event-numndpendrspperndilist" is very large which can then lead to a heap overwrite of the heap object endrsp in all Android releases from CAF Android for MSM, Firefox OS for MSM...

CVE-2017-18070

In wmandpendresponseeventhandler, the variable lenendrsp is a uint32 which can be overflowed if the value of variable "event-numndpendrspperndilist" is very large which can then lead to a heap overwrite of the heap object endrsp in all Android releases from CAF Android for MSM, Firefox OS for MSM...

CVE-2017-18070

In wmandpendresponseeventhandler, the variable lenendrsp is a uint32 which can be overflowed if the value of variable "event-numndpendrspperndilist" is very large which can then lead to a heap overwrite of the heap object endrsp in all Android releases from CAF Android for MSM, Firefox OS for MSM...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-407)

This update for GraphicsMagick fixes the following issues : - security update core - CVE-2018-6799: The AcquireCacheNexus function in magick/pixelcache.c in GraphicsMagick before 1.3.28 allows remote attackers to cause a denial of service heap overwrite or possibly have unspecified other impact v...

Kaspersky KSN Remote Code Execution

Exploit Author: Juan Sacco - http://exploitpack.com Vulnerability found using Exploit Pack v10 CVE: NotYet Exploit description: Kaspersky KSN is prone to a remote memory corruption because it fails to properly filter the input on the remote subscribers, this leads to heap segments overwrite and i...

Kaspersky KSN Remote Code Execution Exploit

Exploit for windows platform in category remote exploits Exploit Author: Juan Sacco - http://exploitpack.com Vulnerability found using Exploit Pack v10 CVE: NotYet Exploit description: Kaspersky KSN is prone to a remote memory corruption because it fails to properly filter the input on the remote...

CVE-2017-9636

Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash...

CVE-2017-9636

Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash...

Design/Logic Flaw

Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash...

CVE-2017-9636

Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash...

CVE-2017-9636

CVE-2017-9636 affects Mitsubishi Electric Europe B.V. E-Designer (Version 7.52 Build 344). Connected advisories describe heap-based buffer overflow weaknesses in multiple code paths (five sections) that can overwrite the heap, enabling arbitrary code execution, data integrity compromise, DoS, and...

Integer overflow

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in the function wmatbttoffsetupdateeventhandler, a parameter received from firmware is used to allocate memory for a local buffer and ...

CVE-2018-5820

CVE-2018-5820 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android on CAF builds using Linux kernel prior to the 2018-04-05 patch level. The issue arises in wma_tbttoffset_update_event_handler(), where a firmware-supplied parameter is used to allocate a local buffer without prope...