CVE-2020-6624

jhead through 3.04 has a heap-based buffer over-read in processDQT in jpgqguess.c...

CVE-2020-6621

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT...

CVE-2020-6618

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttfindtable...

CVE-2019-19953

In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c...

SDL security update

1.2.15-36 - Fix CVE-2019-13616 a heap buffer over-read in BlitNtoN bug 1747237 - Resolves: rhbz1756279...

CVE-2019-17533

CVE-2019-17533 affects MATIO 1.5.17: Mat_VarReadNextInfo4 in mat4.c omits a ‘\0’ and can cause a heap-based buffer over-read in strdup_vprintf when uninitialized memory is accessed. The issue is acknowledged across multiple advisories: Debian DLA-2267-1, Ubuntu USN-5185-1, Mageia MGASA-2020-0299,...

openSUSE Security Update : php7 (openSUSE-2019-2271)

This update for php7 fixes the following issues : Security issues fixed : - CVE-2019-11041: Fixed heap buffer over-read in exifscanthumbnail bsc1146360. - CVE-2019-11042: Fixed heap buffer over-read in exifprocessusercomment bsc1145095. Non-security issue fixed : - Drop -n from php invocation fro...

openSUSE: Security Advisory for php7 (openSUSE-SU-2019:2271-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2019:2503-1 Security update for php7

This update for php7 fixes the following issues: Security issues fixed: - CVE-2019-11041: Fixed heap buffer over-read in exifscanthumbnail bsc1146360. - CVE-2019-11042: Fixed heap buffer over-read in exifprocessusercomment bsc1145095. Non-security issue fixed: - Drop -n from php invocation from...

OPENSUSE-SU-2019:2217-1 Security update for djvulibre

This update for djvulibre fixes the following issues: Security issues fixed: - CVE-2019-15142: Fixed heap-based buffer over-read bsc1146702. - CVE-2019-15143: Fixed resource exhaustion caused by corrupted image files bsc1146569. - CVE-2019-15144: Fixed denial-of-service caused by crafted PBM imag...

SUSE-SU-2019:2452-1 Security update for djvulibre

This update for djvulibre fixes the following issues: Security issues fixed: - CVE-2019-15142: Fixed heap-based buffer over-read bsc1146702. - CVE-2019-15143: Fixed resource exhaustion caused by corrupted image files bsc1146569. - CVE-2019-15144: Fixed denial-of-service caused by crafted PBM imag...

FreeBSD : bro -- invalid memory access or heap buffer over-read (55571619-454e-4769-b1e5-28354659e152)

Jon Siwek of Corelight reports : This is a security patch release to address a potential Denial of Service vulnerability : - The NTLM analyzer did not properly handle AV Pair sequences that were either empty or unterminated, resulting in invalid memory access or heap buffer over-read. The NTLM...

CVE-2019-16166

GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c...

Fedora 30 : SDL (2019-446ca9f695)

This release fixes a heap buffer over-read in BlitNtoN function when processing an invalid BMP image. It also updates a URL in the RPM metadata. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted t...

SUSE SLES12 Security Update : php72 (SUSE-SU-2019:2270-1)

This update for php72 fixes the following issues : Security issues fixed : CVE-2019-11041: Fixed heap buffer over-read in exifscanthumbnail bsc1146360. CVE-2019-11042: Fixed heap buffer over-read in exifprocessusercomment bsc1145095. Note that Tenable Network Security has extracted the preceding...

SUSE-SU-2019:2270-1 Security update for php72

This update for php72 fixes the following issues: Security issues fixed: - CVE-2019-11041: Fixed heap buffer over-read in exifscanthumbnail bsc1146360. - CVE-2019-11042: Fixed heap buffer over-read in exifprocessusercomment bsc1145095...

SUSE SLES12 Security Update : php7 (SUSE-SU-2019:2243-1)

This update for php7 fixes the following issues : Security issues fixed : CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm bsc1140118. CVE-2019-11041: Fixed heap buffer over-read in exifscanthumbnail bsc1146360. CVE-2019-11042: Fixed heap buffer over-read in...

OPENSUSE-SU-2019:1795-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-11597: Fixed a heap-based buffer over-read in the WriteTIFFImage bsc1138464. - Fixed a file content disclosure via SVG and WMF decoding bsc1138425. This update was imported from the SUSE:SLE-15:Update update...

SUSE-SU-2019:1958-2 Security update for glibc

This update for glibc fixes the following issues: Security issues fixed: - CVE-2019-9169: Fixed a heap-based buffer over-read via an attempted case-insensitive regular-expression match bsc1127308. - CVE-2009-5155: Fixed a denial of service in parseregexp bsc1127223. Non-security issues fixed: -...

CVE-2019-13626: Out-of-bounds Read

SDL Simple DirectMedia Layer 2.x through 2.0.9 has a heap-based buffer over-read in FillIMAADPCMblock, caused by an integer overflow in IMAADPCMdecode in audio/SDLwave.c...