CVE-2019-5762: Improper Restriction of Operations within the Bounds of a Memory Buffer

Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file...

The vulnerability of the Firefox browser, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code or trigger a denial-of-service attack.

The vulnerability of the Firefox browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or trigger a denial-of-service attack using a specially crafted web page...

Siemens Intel Active Management Technology of SIMATIC IPCs

1. EXECUTIVE SUMMARY CVSS v3 6.7 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: Intel Active Management Technology AMT of SIMATIC IPCs Vulnerabilities: Cryptographic Issues, Improper Restriction of Operations within the Bounds of a Memory Buffer, Resource...

PT-2019-1534

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to a memory buffer overflow in the scripting engine of Microsoft Edge, allowing a remote attacker to execute arbitrary code. This could lead to memory corruption,...

The vulnerability of the COM Desktop Broker component of the Windows operating system allows a hacker to execute arbitrary code with elevated privileges.

The vulnerability of the COM Desktop Broker component in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a specially created applicatio...

CVE-2019-0010

An SRX Series Service Gateway configured for Unified Threat Management UTM may experience a system crash with the error message "mbuf exceed" -- an indication of memory buffer exhaustion -- due to the receipt of crafted HTTP traffic. Each crafted HTTP packet inspected by UTM consumes mbufs which...

CVE-2019-0010

An SRX Series Service Gateway configured for Unified Threat Management UTM may experience a system crash with the error message "mbuf exceed" -- an indication of memory buffer exhaustion -- due to the receipt of crafted HTTP traffic. Each crafted HTTP packet inspected by UTM consumes mbufs which...

CVE-2019-0010

Summary: CVE-2019-0010 affects Juniper SRX Series with Junos OS UTM enabled. Crafted HTTP traffic can exhaust mbufs in SPU/JMPI, causing a system crash (DoS) and failover. The issue is observed when HTTP AV inspection is enabled; WEB Filtering alone is unaffected. Affected products/versions (per ...

CVE-2019-0010: Allocation of Resources Without Limits or Throttling

An SRX Series Service Gateway configured for Unified Threat Management UTM may experience a system crash with the error message "mbuf exceed" -- an indication of memory buffer exhaustion -- due to the receipt of crafted HTTP traffic. Each crafted HTTP packet inspected by UTM consumes mbufs which...

PT-2019-1145

Name of the Vulnerable Software and Affected Versions: Junos OS on SRX Series versions prior to 12.1X46-D81 Junos OS on SRX Series versions prior to 12.3X48-D77 Junos OS on SRX Series versions prior to 15.1X49-D101 Junos OS on SRX Series versions prior to 15.1X49-D110 Description: The issue is...

CVE-2018-20548: Improper Restriction of Operations within the Bounds of a Memory Buffer

There is an illegal WRITE memory access at common-image.c function loadimage in libcaca 0.99.beta19 for 1bpp data...

CVE-2018-20549: Improper Restriction of Operations within the Bounds of a Memory Buffer

There is an illegal WRITE memory access at caca/file.c function cacafileread in libcaca 0.99.beta19...

The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory, allowing a malicious actor to execute arbitrary code in kernel mode.

The vulnerability of the Win32k component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode using a specially created application...

The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer in memory, allowing a malicious actor to execute arbitrary code in the context of the current user.

The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the context of the current user, using a specially created web page...

The vulnerability of the Qualcomm operating system Android component, which allows a hacker to trigger a buffer overflow in memory

The vulnerability of the Qualcomm Android operating system is related to array indexing errors. Exploiting this vulnerability can allow attackers to cause buffer overflows in memory by using malicious XML data in the firehose directory...

The vulnerability of the Rgui graphical interface, related to buffer overflow in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Rgui graphical interface is related to buffer overflow in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted localization file...

The vulnerability of the CAacDecoder_Init function in the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the CAacDecoderInit function aacdecoder.cpp in the Android operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2018-18959: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. On the 'Air Print Setting' web page, if the data for 'Bonjour Service Location' at /PRESENTATION/BONJOUR is more than 251 bytes when sending data for Air Print Setting, then the device no longe...

CVE-2018-20359: Improper Restriction of Operations within the Bounds of a Memory Buffer

An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbrdec.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-11961: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Possibility of accessing out of bound vector index When updating some GNSS configurations...