CVE-2019-16095

Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c...

CVE-2019-16094

Summary: CVE-2019-16094 affects libmysofa. The issue is an invalid read in readOHDRHeaderMessageDataLayout within hdf/dataobject.c. This vulnerability is referenced across multiple advisories (Ubuntu USN-4473-1, OpenSUSE SEC updates) and is associated with the 0.9.1 release that fixes a set of se...

CVE-2019-16094

Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c...

CVE-2019-16094

Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c...

CVE-2019-16095

Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c...

CVE-2019-16095

Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c...

CVE-2019-16095

CVE-2019-16095 affects Symonics libmysofa 0.7, with an invalid read in getDimension (hrtf/reader.c). Documented impact per CVSS: base 7.5 (HIGH), network attack, no user interaction, and partial confidentiality impact. Connected advisories indicate fixes in libmysofa 0.9.1 (openSUSE/SUSE updates)...

PT-2019-14503 · Symonics +2 · Libmysofa +2

Name of the Vulnerable Software and Affected Versions: Symonics libmysofa version 0.7 Description: The issue is related to an invalid read in the readOHDRHeaderMessageDataLayout function in hdf/dataobject.c. Recommendations: For Symonics libmysofa version 0.7, consider applying a patch or fix to...

PT-2019-14504 · Symonics +2 · Libmysofa +2

Name of the Vulnerable Software and Affected Versions: Symonics libmysofa version 0.7 Description: The issue is related to an invalid read in the getDimension function located in hrtf/reader.c. This problem can lead to unintended behavior. Recommendations: For Symonics libmysofa version 0.7,...

Debian DLA-1902-1 : djvulibre security update

Hongxu Chen found several issues in djvulibre, a library and set of tools to handle images in the DjVu format. The issues are a heap-buffer-overflow, a stack-overflow, an infinite loop and an invalid read when working with crafted files as input. For Debian 8 'Jessie', these problems have been...

SUSE-SU-2019:1962-1 Security update for openexr

This update for openexr fixes the following issues: Security issue fixed: - CVE-2017-9111: Fixed an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h bsc1040109. - CVE-2017-9113: Fixed an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp...

shopify-scripts: Invalid read in `str_replace_partial`

PoC === The attached POC shows an invalid read. Debug info ========== The issue happens when memmove is called inside strreplacepartial. valgrind report: 0==27051== Invalid read of size 1 ==27051== at 0x483FA10: memmove vgreplacestrmem.c:1270 ==27051== by 0x135D60: strreplacepartial string.c:1193...

Cesanta Mongoose Embedded Web Server Library Resource Management Error Vulnerability

Cesanta Mongoose Embedded Web Server Library is a cross-platform embedded server and web library written in C. It is designed to be used with a wide range of applications, including... A resource management error vulnerability exists in the 'mghttpfreeprotodatacgi' function of the mongoose.c file...

Cesanta Mongoose Embedded Web Server Library Resource Management Error Vulnerability (CNVD-2019-22663)

Cesanta Mongoose Embedded Web Server Library is a cross-platform embedded server and web library written in C. It is designed to be used with a wide range of applications, including... A resource management error vulnerability exists in the 'mghttpgetprotodata' function of the mongoose.c file in...

CVE-2018-20356

An invalid read of 8 bytes due to a use-after-free vulnerability in the mghttpfreeprotodatacgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service application crash or remote code execution...

CVE-2018-20354

An invalid read of 8 bytes due to a use-after-free vulnerability during a "return" in the mghttpgetprotodata function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service application crash or remote code execution...

Remote code execution

An invalid read of 8 bytes due to a use-after-free vulnerability during a "NULL test" in the mghttpgetprotodata function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service application crash or remote code execution...

CVE-2018-20354

The CVE-2018-20354 issue affects Cesanta Mongoose Embedded Web Server Library (versions 6.13 and earlier). A use-after-free in mg_http_get_proto_data during a return causes an invalid read of 8 bytes, leading to denial of service (crash) or remote code execution. NVD data shows high/critical impa...

CVE-2018-20354

An invalid read of 8 bytes due to a use-after-free vulnerability during a "return" in the mghttpgetprotodata function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service application crash or remote code execution...

CVE-2018-20353

The CVE affects Cesanta Mongoose Embedded Web Server Library, versions 6.13 and earlier, where a use-after-free causes an invalid read of 8 bytes in mg_http_get_proto_data. This vulnerability can lead to a denial of service (application crash) or remote code execution. No exploitation details are...