317 matches found
DEBIAN-CVE-2020-10811
An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5Olayoutdecode located in H5Olayout.c. It allows an attacker to cause Denial of Service...
freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash
An out-of-bounds buffer overflow flaw was found in FreeType prior to version 2.6.1...
PT-2019-15051 · Libyal +1 · Liblnk +1
Name of the Vulnerable Software and Affected Versions: libyal liblnk versions prior to 20191006 Description: The issue is related to a heap-based buffer over-read in the liblnk location information read data function, located in liblnk location information.c, due to the use of an incorrect variab...
poppler: heap-based buffer over-read in function PSOutputDev::checkPageSlice in PSOutputDev.cc
An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc...
UBUNTU-CVE-2019-14437
The xiphSplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file...
CVE-2019-15047
An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the function AP4BitReader::SkipBits at Core/Ap4Utils.cpp...
ALPINE-CVE-2019-13616
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDLblitN.c when called from SDLSoftBlit in video/SDLblit.c...
PT-2019-13372 · Cesanta · Mongoose
Name of the Vulnerable Software and Affected Versions: Mongoose version 6.15 Description: The issue is related to a heap-based buffer over-read in the mq parse http function in mongoose.c. Recommendations: For Mongoose version 6.15, at the moment, there is no information about a newer version tha...
UBUNTU-CVE-2019-13312
blockcmp in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read...
CVE-2019-13286
In Xpdf 4.01.01, there is a heap-based buffer over-read in the function JBIG2Stream::readTextRegionSeg located at JBIG2Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure...
PT-2019-13236 · Xpdf · Xpdf
Name of the Vulnerable Software and Affected Versions: Xpdf version 4.01.01 Description: A heap-based buffer over-read issue can be triggered in the SampledFunction::transform function when using a large index for samples, potentially allowing an attacker to cause Denial of Service or an...
Poppler heap buffer overread vulnerability (CNVD-2019-15934)
Poppler is based on xpdf-3.0 code base PDF rendering library. A heap buffer over-read vulnerability exists in JPXStream::init in JPEG2000Stream.cc in Poppler 0.76.1 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service via data with inconsistent height or...
CVE-2017-12839
A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote attackers to cause a possible denial-of-service out-of-bounds read or possibly have unspecified other impact via a crafted mp3 file...
ALPINE-CVE-2019-7638
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDLpixels.c...
DEBIAN-CVE-2019-7574
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMAADPCMdecode in audio/SDLwave.c...
Security Bulletin: Vulnerabilities in libxml2 affect IBM Flex System Networking Switch products
Summary IBM Flex System Networking Switch products have addressed the following vulnerabilities in libxml2. Vulnerability Details Summary IBM Flex System Networking Switch products have addressed the following vulnerabilities in libxml2. Vulnerability Details: CVE-ID: CVE-2016-3627 Description:...
LibSass Heap Buffer Over-Read Vulnerability
LibSass is the C/C ++ implementation of the Sass compiler. A heap-based buffer over-read vulnerability exists in Sass::Prelexer::alternatives in prelexer.hpp in LibSass 3.5.5. An attacker can exploit this vulnerability to cause a denial of service...
UBUNTU-CVE-2019-6286
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar issue to CVE-2018-11693...
PT-2019-18071 · Sass +2 · Libsass +2
Name of the Vulnerable Software and Affected Versions: LibSass version 3.5.5 Description: A heap-based buffer over-read issue exists in the Sass::Prelexer::parenthese scope function, located in prelexer.hpp. This issue may potentially be exploited. Recommendations: For LibSass version 3.5.5,...