208 matches found
CVE-2018-8403
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability." This affects Internet Explorer 11, Microsoft Edge, Internet Explorer 10...
Google WebRTC VP9 Out-of-Bounds Memory Access Vulnerability
WebRTC, whose name derives from the acronym Web Real-Time Communication, is a technology that supports real-time voice or video conversations in web browsers. A security vulnerability exists in Google WebRTC VP9. An attacker can exploit the vulnerability to cause Chrome to crash. The vulnerabilit...
CVE-2017-5447
An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to read otherwise inaccessible memory. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...
CVE-2017-17314
The CVE-2017-17314 issue affects Huawei DP300, RP200, TE30/TE40/TE50/TE60 platforms (versions listed in the initial entry). It is an invalid memory access vulnerability caused by insufficient input validation of certain fields in malformed SCCP messages, which unauthenticated attackers can send t...
CVE-2017-17314
Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have an invalid memory access vulnerability. An unauthenticated attacker has to find a way to send...
CVE-2017-17308
SCCPX module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has an invalid memory access vulnerability. An unauthenticated, remote...
NVIDIA GPU Display Driver Out-of-Bounds Memory Access Vulnerability
NVIDIA GPU Display Driver is the GPU Graphics Processing Unit display driver. An out-of-bounds memory access vulnerability exists in the kernel mode layer handler for DxgkDdiEscape in the NVIDIA GPU Display Driver. The vulnerability arises when the software reads or writes a buffer using a...
Illegal Memory Access Vulnerability in Lovecraft Universal Player
Lovecraft Universal Player is a universal video and audio player from Lovecraft. A QiYi Universal Player suffers from an illegal memory access vulnerability when handling special avi files, which can be exploited by an attacker to cause a denial of service attack...
CVE-2017-17163
Huawei Secospace USG6600 V500R001C30SPC100 has an Out-of-Bounds memory access vulnerability due to insufficient verification. An authenticated local attacker can make processing crash by executing some commands. The attacker can exploit this vulnerability to cause a denial of service...
Moderate: Red Hat Security Advisory: qemu-kvm security update
An update for qemu-kvm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
CVE-2017-8183
MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any...
Huawei Enjoy 6 MTK Platform Arbitrary Memory Access Vulnerability
The Huawei Enjoy 6 is a smartphone from the Chinese company Huawei Huawei. The Huawei Enjoy 6 MTK platform suffers from an arbitrary memory access vulnerability, which can be used by attackers to trick users into installing malicious apps, which can be exploited to send specific parameters leadin...
CVE-2017-12613
CVE-2017-12613 affects the Apache Portable Runtime (APR) library: out-of-bounds memory access when apr_time_exp*() or apr_os_exp_time*() are given an invalid month, potentially exposing heap contents or triggering a denial of service. A fix was released in APR 1.6.3 (and later backported in some ...
xen system memory access vulnerability
Xen is an open source virtual machine monitor developed by the Xen Project. The xen system has a memory access vulnerability that can be exploited by an attacker for elevation of privilege...
CVE-2017-9714
CVE-2017-9714 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels. The root cause is an out-of-bounds memory access in limCheckRxRSNIeMatch when an incorrect RSNIE is received in an association request. The CVE is listed with a NVD CVSS v3.0 base score of 7...
Google Android Qualcomm Component Memory Access Vulnerability
Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A security vulnerability exists in the Qualcomm closed-source component in Android. A...
(0Day) Advantech WebAccess nvA1Media GetMDInterval Out-Of-Bounds Access Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within nvA1Media.oc...
KLA11037 Arbitrary code execution vulnerability in VMware products
An out-of-bounds memory access vulnerability in the DnD drag-and-drop function was found in VMware Workstation Pro and VMware Workstation Player. By exploiting this vulnerability malicious users can execute arbitrary code on the operating system running VMware Workstation Pro or VMware Workstatio...
Google Chrome WebRTC Out-of-Bounds Memory Access Vulnerability
Google Chrome is a popular web browser. A memory access vulnerability exists in the Google Chrome WebRTC overrun, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing by the user, which can crash the application or execute...