Google Android Qualcomm Closed Source Component Resource Depletion Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A resource exhaustion vulnerability exists in the Qualcomm closed-source component in Android. An attacker can exploit the vulnerability to cause invalid indexes to exceed bound memory accesses...

The vulnerability of the `proceed_next_node` function in the GNU C library, which relates to the possibility of reading buffers outside the memory boundary, allows attackers to trigger a service failure.

The vulnerability in the proceednextnode function in posix/regexec.c of the GNU C library is related to the ability to read buffers outside the memory boundary, caused by comparing with a regular expression that does not depend on registers. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the processmetadata function in the GNU Libextractor library, related to reading beyond the memory boundaries, allows attackers to cause service failures or disclose protected information.

The vulnerability of the processmetadata function in the GNU Libextractor library is related to the issue of reading beyond the memory boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures or expose protected information...

The vulnerability of the Wireshark traffic analyzer program, related to reading data beyond the memory boundaries, allows a hacker to cause a service failure.

The vulnerability of the Wireshark traffic analyzer program relates to reading data beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially crafted package...

Clam AntiVirus Buffer Overflow Vulnerability

Clam AntiVirus is an open source antivirus engine from the ClamAV team for detecting Trojans, viruses, malware and other malicious threats. A buffer error vulnerability exists in the PDF scanning feature in Clam AntiVirus versions 0.101.1 and 0.101.0. The vulnerability originates when a networked...

The vulnerability of the HECI subsystem of the microprogramming software, Intel Converged Security and Manageability Engine, Intel Trusted Execution Engine, and Intel Server Platform Services allows a perpetrator to execute arbitrary code.

The vulnerability of Microprogramming Software, including Intel Converged Security and Manageability Engine CSME, Intel Trusted Execution Engine TXE, and Intel Server Platform Services SPS, is related to the execution of operations outside of the buffer in memory. Exploitation of this vulnerabili...

The vulnerability of the sec_merge_hash_lookup function in the GNU Binutils development tool, related to incorrect checking of memory access boundaries, allows a hacker to trigger a service failure.

The vulnerability of the secmergehashlookup function in the GNU Binutils development tooling is related to improper checking of memory access boundaries, which can lead to reading beyond the buffer’s bounds, especially when the size of a segment is not a multiple of the size of a single record...

SUSE SLES11 Security Update : Recommended update for glibc (SUSE-SU-2018:4067-1)

This update for glibc fixes the following issues : Security issue fixed : CVE-2017-15671: Fixed memory leak in glob with GLOBTILDE bsc1064569, BZ 22325. Non-security issue fixed: Avoid access beyond memory bounds in pthreadattrgetaffinitynp bsc1110170, BZ 15618. Remove improper assert in dlclose...

SUSE-SU-2018:4067-1 Recommended update for glibc

This update for glibc fixes the following issues: Security issue fixed: - CVE-2017-15671: Fixed memory leak in glob with GLOBTILDE bsc1064569, BZ 22325. Non-security issue fixed: - Avoid access beyond memory bounds in pthreadattrgetaffinitynp bsc1110170, BZ 15618. - Remove improper assert in...

The vulnerability of the Chrome web browser’s angle library, allowing a hacker to execute arbitrary code

The vulnerability of the Chrome web browser’s angle library arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, cause system failures, or disclose sensitive information through a specially...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

kernel: incorrect memory bounds check in drivers/cdrom/cdrom.c

A flaw was found in the Linux kernel, before 4.16.6 where the cdromioctlmediachanged function in drivers/cdrom/cdrom.c allows local attackers to use a incorrect bounds check in the CDROM driver CDROMMEDIACHANGED ioctl to read out kernel memory...

kernel: incorrect memory bounds check in drivers/cdrom/cdrom.c

A flaw was found in the Linux kernel, before 4.16.6 where the cdromioctlmediachanged function in drivers/cdrom/cdrom.c allows local attackers to use a incorrect bounds check in the CDROM driver CDROMMEDIACHANGED ioctl to read out kernel memory...

Vulnerability of the `sdcardfs_create` and `sdcardfs_mkdir` functions in the Android operating system’s kernel, allowing attackers to escalate their privileges

The vulnerabilities of the sdcardfscreate and sdcardfsmkdir functions in inode.c of the Android operating system stem from operations that go beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow attackers to gain increased privileges...

The vulnerability of the Windows operating system’s kernel allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of Windows operating system cores arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

Safe'N'Sec SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure and SoftControl/SafenSoft Enterprise Unauthorized Operation Vulnerabilities

Safe'N'Sec SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise are Russian Safe'N'Sec's proactive malware defense applications. A vulnerability exists in the snscore.sys file in Safe'N'Sec SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft...

The vulnerability of Microsoft Excel’s spreadsheet editor involves an operation where data is written beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file, from a remote location...

The vulnerability of Microsoft Edge browser and the ChakraCore JavaScript engine handler, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge browser and the JavaScript scenario handler ChakraCore arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Sentinel LDK RTE platform for software protection and licensing arises from an operation that goes beyond buffer boundaries in memory, allowing a malicious actor to trigger a service failure.

The vulnerability of the Sentinel LDK RTE platform for software protection and licensing stems from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...