Arbitrary Code Execution

wireshark is vulnerable to arbitrary code execution. A heap-based buffer overflow flaw was found in the Wireshark MAC-LTE dissector. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshar...

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. A heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF Internet Fax image files, compressed with the CCITT Group 4 compression algorithm. An attacker could use this flaw to create a specially-crafted TIFF file that,...

Arbitrary Code Execution

wireshark is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow flaw was found in Wireshark. If Wireshark opened a specially-crafted capture file, it could crash or, possibly, execute arbitrary code as the user running Wireshark...

Denial Of Service (DoS)

ImageMagick is vulnerable to Denial of Service DoS. It is due to an integer overflow flaw, leading to a heap-based buffer overflow in the ImageMagick routine responsible for creating X11 images. An attacker could create a specially-crafted image file that, when opened by a victim, would cause...

Arbitrary Code Execution

tar is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow flaw was found in the way tar expanded archive files. If a user were tricked into expanding a specially-crafted archive, it could cause the tar executable to crash or execute arbitrary code wit...

Arbitrary Code Execution

ghostscript is vulnerable to arbitrary code execution. The vulnerability exists as multiple integer overflow flaws which could lead to heap-based buffer overflows, as well as multiple insufficient input validation flaws, were found in Ghostscript's International Color Consortium Format library...

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow flaw was found in the way ImageMagick parsed XCF files. If a specially-crafted XCF image was opened, ImageMagick could be made to overwrite heap memory beyond the bounds of its allocate...

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow flaw was found in ImageMagick's processing of certain malformed PCX images. If a victim opened a specially-crafted PCX file, an attacker could possibly execute arbitrary code on the...

Heap-based Buffer Overflow

The libtiff is vulnerable to Heap-based buffer overflow. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

Heap-based Buffer Overflow

The gdk-pixbuf is vulnerable to heap-based buffer overflow. A bug was found in the way gdk-pixbuf processes XPM images. An attacker could create a carefully crafted XPM file in such a way that it could cause an application linked with gdk-pixbuf to execute arbitrary code when the file was opened ...

Fuji Electric V-Server Lite VPR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric V-Server Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-16435

Little CMS aka Little Color Management System 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile...

taglib security update

CentOS Errata and Security Advisory CESA-2020:1175 An update for taglib is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

evince, poppler security update

CentOS Errata and Security Advisory CESA-2020:1074 An update for poppler and evince is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detaile...

CVE-2020-5496

FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...

CVE-2018-21087

An issue was discovered on Samsung mobile devices with L5.x, M6.x, and N7.x software. There is a vnswap heap-based buffer overflow via the store function, with resultant privilege escalation. The Samsung ID is SVE-2017-10599 January 2018...

CVE-2018-21087

An issue was discovered on Samsung mobile devices with L5.x, M6.x, and N7.x software. There is a vnswap heap-based buffer overflow via the store function, with resultant privilege escalation. The Samsung ID is SVE-2017-10599 January 2018...

CVE-2017-18644

An issue was discovered on Samsung mobile devices with L5.1, M6.x, and N7.x software. There is a muicsetregsel heap-based buffer overflow during the reading of MUIC register values. The Samsung ID is SVE-2017-10011 December 2017...

CVE-2017-18644

Samsung CVE-2017-18644 affects mobile devices running L(5.1), M(6.x), and N(7.x). The issue is a heap-based buffer overflow in muic_set_reg_sel when reading MUIC register values (root cause). The Samsung ID is SVE-2017-10011. No fixes or mitigations are detailed in the provided documents; referen...

CVE-2016-11030

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, and M6.0 with Hrm sensor support software. The sysfs of the MAX86902 sensor driver does not prevent concurrent access, leading to a race condition and resultant heap-based buffer overflow. The Samsung ID is SVE-2016-7341...