5277 matches found
CVE-2018-14325
In MP4v2 2.0.0, there is an integer underflow with resultant memory corruption when parsing MP4Atom in mp4atom.cpp...
CVE-2018-14325
In MP4v2 2.0.0, there is an integer underflow with resultant memory corruption when parsing MP4Atom in mp4atom.cpp...
PT-2018-12440 · Mp4V2 · Mp4V2
Name of the Vulnerable Software and Affected Versions: MP4v2 version 2.0.0 Description: The issue arises from an integer underflow that leads to memory corruption when parsing MP4Atom in mp4atom.cpp. Recommendations: For MP4v2 version 2.0.0, at the moment, there is no information about a newer...
CVE-2018-14325
CVE-2018-14325 affects MP4v2 2.0.0, where parsing MP4Atom in mp4atom.cpp can trigger an integer underflow leading to memory corruption. Public sources in the connected documents confirm the root cause is an underflow in MP4Atom parsing, with the vulnerability being exploitable via crafted MP4 fil...
CVE-2018-14325
In MP4v2 2.0.0, there is an integer underflow with resultant memory corruption when parsing MP4Atom in mp4atom.cpp...
CVE-2018-14325
Removed by vendor...
openssl: Truncated packet could crash via OOB read
An integer underflow leading to an out of bounds read flaw was found in OpenSSL. A remote attacker could possibly use this flaw to crash a 32-bit TLS/SSL server or client using OpenSSL if it used the RC4-MD5 cipher suite...
openssl: Insufficient TLS session ticket HMAC length checks
An integer underflow flaw leading to a buffer over-read was found in the way OpenSSL parsed TLS session tickets. A remote attacker could use this flaw to crash a TLS server using OpenSSL if it used SHA-512 as HMAC for session tickets...
openssl: Truncated packet could crash via OOB read
An integer underflow leading to an out of bounds read flaw was found in OpenSSL. A remote attacker could possibly use this flaw to crash a 32-bit TLS/SSL server or client using OpenSSL if it used the RC4-MD5 cipher suite...
openssl: Truncated packet could crash via OOB read
An integer underflow leading to an out of bounds read flaw was found in OpenSSL. A remote attacker could possibly use this flaw to crash a 32-bit TLS/SSL server or client using OpenSSL if it used the RC4-MD5 cipher suite...
openssl: Insufficient TLS session ticket HMAC length checks
An integer underflow flaw leading to a buffer over-read was found in the way OpenSSL parsed TLS session tickets. A remote attacker could use this flaw to crash a TLS server using OpenSSL if it used SHA-512 as HMAC for session tickets...
Integer overflow
An wrong logical check identified in the transferFrom function of a smart contract implementation for RemiCoin RMC, an Ethereum ERC20 token, allows the attacker to steal tokens or conduct resultant integer underflow attacks...
CVE-2018-12230
An wrong logical check identified in the transferFrom function of a smart contract implementation for RemiCoin RMC, an Ethereum ERC20 token, allows the attacker to steal tokens or conduct resultant integer underflow attacks...
CVE-2018-12230
An wrong logical check identified in the transferFrom function of a smart contract implementation for RemiCoin RMC, an Ethereum ERC20 token, allows the attacker to steal tokens or conduct resultant integer underflow attacks...
PT-2018-3299 · Mutt +5 · Mutt +5
Name of the Vulnerable Software and Affected Versions: Mutt versions prior to 1.10.1 NeoMutt versions prior to 2018-07-16 Description: An issue was discovered in the imap quote string function of the imap/util.c file in Mutt and NeoMutt email clients. The issue is related to an integer underflow...
Integer overflow
While processing a debug log event from firmware in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-07-05, an integer underflow and/or buffer over-read can occur...
CVE-2018-5865
While processing a debug log event from firmware in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-07-05, an integer underflow and/or buffer over-read can occur...
CVE-2018-5865
CVE-2018-5865 affects Qualcomm fwlog in Android CAF/Linux kernel builds prior to the 2018-07-05 patch level. The issue is described as an integer underflow and/or buffer over-read in processing a debug log event, leading to information disclosure (high impact on confidentiality per CVSS3, local, ...
CVE-2018-5865
While processing a debug log event from firmware in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-07-05, an integer underflow and/or buffer over-read can occur...
EulerOS 2.0 SP3 : ruby (EulerOS-SA-2018-1207)
According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that the tmpdir and tempfile modules did not sanitize their file name argument. An attacker with control over the name could create...