The vulnerability of the HistogramCompare() function in the MagickCore/histogram.c component of the ImageMagick console-based graphics editor allows a hacker to cause a service failure.

The vulnerability of the HistogramCompare function in the MagickCore/histogram.c component of the ImageMagick console-based graphics editor allows for integer overflow of values. Exploiting this vulnerability enables a remote attacker to cause a service failure...

CVE-2020-11273

Histogram type KPI was teardown with the assumption of the existence of histogram binning info and will lead to null pointer access when histogram binning info is missing due to lack of null check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile...

Null pointer dereference

Histogram type KPI was teardown with the assumption of the existence of histogram binning info and will lead to null pointer access when histogram binning info is missing due to lack of null check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile...

CVE-2020-11273

Histogram type KPI was teardown with the assumption of the existence of histogram binning info and will lead to null pointer access when histogram binning info is missing due to lack of null check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile...

CVE-2020-11273

CVE-2020-11273 affects Qualcomm Snapdragon SoCs (Snapdragon Auto/Compute/Connectivity/Mobile) where a histogram binning info missing leads to null pointer access due to a missing null check. Reported CVSSv3.1 base score 7.5 (HIGH) with network attack vector and no user interaction. The issue is d...

Qualcomm Snapdragon SOC 代码问题漏洞

The Qualcomm Snapdragon SOC Snapdragon Processor is a chip from Qualcomm Incorporated USA that is used in mobile devices to process information. A security vulnerability exists in the Qualcomm Snapdragon SOC that stems from a lack of zero-checking, resulting in null pointer access when histogram...

CVE-2020-11237

Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before accessing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile...

Design/Logic Flaw

Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before accessing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile...

CVE-2020-11237

The CVE-2020-11237 entry concerns a memory crash caused by not checking the histogram definition before accessing it in Qualcomm Snapdragon components (Snapdragon Auto/Compute/Connectivity/Mobile). The issue is triggered during histogram KPI input handling and is documented as a local issue with ...

CVE-2020-11237

Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before accessing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile...

Qualcomm 芯片 输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits including primarily semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. An input validation error vulnerability exists in...

CVE-2020-11186

Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile...

Fedora 33 : nagios (2021-5689072a7e)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-5689072a7e advisory. - Nagios 4.4.5 allows an attacker, who already has administrative access to change the URL for JSON CGIs configuration setting, to modify the Alert Histogram...

Twitter TwitterServer Cross-Site Scripting Vulnerability

Twitter TwitterServer is a Scala-based software for building Twitter servers. The software can be used to build a Twitter server through the template, in addition to the server can be managed, monitoring. A cross-site scripting vulnerability exists in Twitter TwitterServer versions prior to 20.12...

Twitter TwitterServer 跨站脚本漏洞

Twitter TwitterServer is a Scala-based software for building Twitter servers. The software can be used to build a Twitter server through the template, in addition to the server can be managed, monitoring. A cross-site scripting vulnerability exists in Twitter TwitterServer versions prior to 20.12...

UBUNTU-CVE-2020-25666

There are 4 places in HistogramCompare in MagickCore/histogram.c where an integer overflow is possible during simple math calculations. This occurs in the rgb values and count value for a color. The patch uses casts to ssizet type for these calculations, instead of int. This flaw could impact...

ImageMagick Studio ImageMagick 输入验证错误漏洞

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.0.9-0, which stems...

Nagios Injection Vulnerability

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A security vulnerability exists in Nagios version 4.4.5. The vulnerability can be exploited by an attacker to modify the alert histogram and trending function code via modified archive.json,...

DEBIAN-CVE-2020-13977

Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files. NOTE: this vulnerability has been...

CVE-2020-13977

Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files. NOTE: this vulnerability has been...