Design/Logic Flaw

Insufficient boundary checks when decoding JSON in handleBackslash reads out of bounds memory, potentially leading to DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 inclusive, versions between 4.9.0 and 4.32.0 inclusive, and...

CVE-2020-1888

CVE-2020-1888 affects HHVM across a wide set of versions, with the root cause being insufficient boundary checks when decoding JSON in handleBackslash, causing reads out of bounds and potential DoS. Impact per sources includes high likelihood of denial of service (CVSSv3.1 base score 7.5; CVSSv2 ...

python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c

A flaw was discovered in python-pillow does where it does not properly restrict operations within the bounds of a memory buffer when decoding PCX images. An application that uses python-pillow to decode untrusted images may be vulnerable to this flaw, which can allow an attacker to crash the...

python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c

A flaw was discovered in python-pillow does where it does not properly restrict operations within the bounds of a memory buffer when decoding PCX images. An application that uses python-pillow to decode untrusted images may be vulnerable to this flaw, which can allow an attacker to crash the...

python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c

A flaw was discovered in python-pillow does where it does not properly restrict operations within the bounds of a memory buffer when decoding PCX images. An application that uses python-pillow to decode untrusted images may be vulnerable to this flaw, which can allow an attacker to crash the...

NetHack Buffer Overflow Vulnerability (CNVD-2020-14198)

NetHack is a role-playing single-player game. A security vulnerability exists in NetHack. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write operations being performed to...

Lustre ptlrpc module buffer overflow vulnerability (CNVD-2020-07303)

Lustre is a parallel distributed file system typically used in large computer clusters and supercomputers, of which Lustre ptlrpc is a module. A buffer overflow vulnerability exists in the Lustre ptlrpc module. The vulnerability stems from a networked system or product performing operations in...

OSSEC-HIDS Server Component Buffer Overflow Vulnerability (CNVD-2020-04124)

OSSEC-HIDS is an open source intrusion detection tool. A buffer overflow vulnerability exists in the OSSEC-HIDS server component. The vulnerability originates when a network system or product performs operations on memory without properly validating data boundaries, resulting in incorrect read an...

libsixel Heap Buffer Overflow Vulnerability

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A buffer overflow vulnerability exists in the 'imagebufferresize' function of the fromsixel.c file in versions of libsixel prior to 1.8.4. The vulnerability stems from a...

WebKit component buffer overflow vulnerability in multiple Apple products (CNVD-2020-00485)

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. webKit is one of the web browser WebKit is a Web browser engine component. A buffer error vulnerability...

WAGO PFC 200 'I/O-Check' Buffer Overflow Vulnerability

The WAGO PFC 200 and WAGO PFC 100 are both programmable logic controllers PLCs from WAGO Germany. A buffer overflow vulnerability exists in the 'I/O-Check' function in the WAGO PFC 200 and PFC100. The vulnerability originates when a networked system or product performs an operation on memory...

The vulnerability of the `add_ie_rates` function in the Marvell WiFi kernel driver for Linux operating systems allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the addierates function in the Marvell WiFi kernel driver for Linux operating systems is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service...

Intel Baseboard Management Controller Buffer Overflow Vulnerability (CNVD-2020-12697)

The Intel Baseboard Management Controller BMC is a baseboard management controller from Intel Corporation USA. A buffer overflow vulnerability exists in Intel BMC, which originates when a networked system or product performs an operation in memory without properly validating the data boundaries,...

Envoy Buffer Overflow Vulnerability

Envoy is an open source distributed proxy server . A buffer overflow vulnerability exists in Envoy version 1.12.0. The vulnerability stems from a networked system or product that performs operations in memory without properly validating data boundaries, resulting in incorrect read and write...

ShapeShift KeepKey Buffer Overflow Vulnerability

ShapeShift KeepKey is an e-wallet device for cryptocurrency storage. ShapeShift KeepKey suffers from a punch zone overflow vulnerability. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect...

The vulnerability of Google Chrome’s swiftshader library, which allows a hacker to trigger a service failure.

The vulnerability of Google Chrome’s swiftshader library arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

typed_ast buffer overflow vulnerability

typedast is a Python parser. A buffer overflow vulnerability exists in typedast versions 1.3.0 and 1.3.1. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write operations being...

Oniguruma Heap Buffer Overflow Vulnerability

Oniguruma is an open source regular expression library. A buffer error vulnerability exists in strlowercasematch in the regexec.c file in Oniguruma versions 6.9.3 and earlier used in PHP version 7.3.x and other products. The vulnerability stems from a web-based system or product that performs...

3S-Smart Software Solutions CODESYS Buffer Overflow Vulnerability

3S-Smart Software Solutions CODESYS V3 web server is a web server used in CODESYS products from 3S-Smart Software Solutions, Germany. A buffer overflow vulnerability exists in the web server of the runtime system in versions prior to 3S-Smart Software Solutions CODESYS 3.5.15.20. The vulnerabilit...

tcpdump buffer overflow vulnerability (CNVD-2019-41914)

tcpdump is a set of sniffing tools from Tcpdump team running under command line. The tool is mainly used for packet analysis and network traffic capture etc. A buffer overflow vulnerability exists in tcpdump. The vulnerability stems from a failure of a network system or product to properly valida...