CVE-2018-5820

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in the function wmatbttoffsetupdateeventhandler, a parameter received from firmware is used to allocate memory for a local buffer and ...

CVE-2017-15831

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function wmandpendindicationeventhandler, there is no input validation check on a eventinfo value coming from firmware, which can cause an integer overflow and then leads to...

Integer overflow

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function wmandpendindicationeventhandler, there is no input validation check on a eventinfo value coming from firmware, which can cause an integer overflow and then leads to...

CVE-2017-15831

CVE-2017-15831 describes a vulnerability in Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux, where the function wma_ndp_end_indication_event_handler() performs no input validation on an event_info value from firmware. This can cause an integer overflow and potentially ...

CVE-2017-15831

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function wmandpendindicationeventhandler, there is no input validation check on a eventinfo value coming from firmware, which can cause an integer overflow and then leads to...

WavPack ParseDsdiffHeaderConfig Function Denial of Service Vulnerability

WavPack is a free, open-source lossless audio compression format developed by David Bryant, with a .wv file extension. A denial of service vulnerability exists in the ParseDsdiffHeaderConfig function of the cli/dsdiff.c file in WavPack 5.1.0. A remote attacker can exploit this vulnerability via a...

CVE-2018-7253

The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service heap-based buffer over-read or possibly overwrite the heap via a maliciously crafted DSDIFF file...

CVE-2018-7253

The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service heap-based buffer over-read or possibly overwrite the heap via a maliciously crafted DSDIFF file...

CVE-2018-7253

The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service heap-based buffer over-read or possibly overwrite the heap via a maliciously crafted DSDIFF file...

CVE-2018-7253

CVE-2018-7253 affects WavPack 5.1.0, where ParseDsdiffHeaderConfig (cli/dsdiff.c) can cause a heap-based buffer over-read and possibly heap overwrite via a malicious DSDIFF file, leading to denial of service. The issue is confirmed in multiple advisories (e.g., Debian DSA entries) and FreeBSD/vux...

CVE-2018-7253

The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service heap-based buffer over-read or possibly overwrite the heap via a maliciously crafted DSDIFF file...

DEBIAN-CVE-2018-6799

The AcquireCacheNexus function in magick/pixelcache.c in GraphicsMagick before 1.3.28 allows remote attackers to cause a denial of service heap overwrite or possibly have unspecified other impact via a crafted image file, because a pixel staging area is not used...

CVE-2018-6799

The AcquireCacheNexus function in magick/pixelcache.c in GraphicsMagick before 1.3.28 allows remote attackers to cause a denial of service heap overwrite or possibly have unspecified other impact via a crafted image file, because a pixel staging area is not used...

CVE-2018-6799

The AcquireCacheNexus function in magick/pixelcache.c in GraphicsMagick before 1.3.28 allows remote attackers to cause a denial of service heap overwrite or possibly have unspecified other impact via a crafted image file, because a pixel staging area is not used...

CVE-2018-6799

The AcquireCacheNexus function in magick/pixelcache.c in GraphicsMagick before 1.3.28 allows remote attackers to cause a denial of service heap overwrite or possibly have unspecified other impact via a crafted image file, because a pixel staging area is not used...

CVE-2018-6799

The AcquireCacheNexus function in magick/pixelcache.c in GraphicsMagick before 1.3.28 allows remote attackers to cause a denial of service heap overwrite or possibly have unspecified other impact via a crafted image file, because a pixel staging area is not used...

CVE-2018-6799

GraphicsMagick prior to 1.3.28 is vulnerable to CVE-2018-6799 via the AcquireCacheNexus in magick/pixel_cache.c. A crafted image can trigger a heap overwrite in the pixel staging area, enabling a remote attacker to cause a denial of service and potentially other impact. A patch is available; advi...

CVE-2018-6799

The AcquireCacheNexus function in magick/pixelcache.c in GraphicsMagick before 1.3.28 allows remote attackers to cause a denial of service heap overwrite or possibly have unspecified other impact via a crafted image file, because a pixel staging area is not used...

Micro Focus VisiBroker C++ 8.5 SP2 Memory Corruption Vulnerability

Micro Focus VisiBroker C++ version 8.5 SP2 suffers from multiple memory corruption vulnerabilities. title: Multiple vulnerabilities product: Micro Focus VisiBroker C++ vulnerable version: 8.5 SP2 fixed version: 8.5 SP4 HF3 CVE number: CVE-2017-9281, CVE-2017-9282, CVE-2017-9283 impact: High...

Micro Focus VisiBroker C++ 8.5 SP2 Memory Corruption

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Micro Focus VisiBroker C++ vulnerable version: 8.5 SP2 fixed version: 8.5 SP4 HF3 CVE number: CVE-2017-9281, CVE-2017-9282, CVE-2017-928...