XNU Kernel - Heap Overflow Due to Bad Bounds Checking in MPTCP

XNU Kernel - Heap Overflow Due to Bad Bounds Checking in MPTCP mptcpusrconnectx is the handler for the connectx syscall for the APMULTIPATH socket family. The logic of this function fails to correctly handle source and destination sockaddrs which aren't AFINET or AFINET6: // verify salen for...

The vulnerability of the Qualcomm Audio Handler component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Qualcomm Audio Handler component in the Android operating system is caused by an overflow in memory buffers. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Qualcomm operating system Android allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Qualcomm Android operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information using the RIL interface...

CURL-CVE-2018-1000300 FTP shutdown response buffer overflow

curl might overflow a heap based memory buffer when closing down an FTP connection with long server command replies. When doing FTP transfers, curl keeps a spare "closure handle" around internally that is used when an FTP connection gets shut down since the original curl easy handle is then alrea...

The vulnerability of JavaScript script handlers in Internet Explorer allows a perpetrator to execute arbitrary code.

The vulnerability of JavaScript script handlers in Internet Explorer arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

CVE-2015-9180

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD...

kernel: Unallocated memory access by malicious USB device via bNumInterfaces overflow

The usbdestroyconfiguration function, in 'drivers/usb/core/config.c' in the USB core subsystem, in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources. This allows local users to cause a denial of service, du...

The vulnerability of the HPE Data Protector backup software arises from an operation that goes beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the HPE Data Protector backup tool arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer in memory, allowing a malicious actor to trigger a service failure or execute arbitrary code.

The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted web page...

The vulnerability of the mem_check_range function (drivers/infiniband/sw/rxe/rxe_mr.c) in the Linux operating system’s kernel allows a hacker to disclose protected information or cause service failures.

The vulnerability of the memcheckrange function in the Linux operating system’s drivers/infiniband/sw/rxe/rxemr.c file is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures through write and read requests...

The vulnerability of the memalign function in libraries that handle system calls and core glibc functions allows a attacker to cause a service failure.

The vulnerability of the memalign function in libraries that handle system calls and core glibc functions arises from a cyclic shift of pointers, which leads to memory overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure...

Memory Access Overflow Vulnerability in Polaris Office 2017 (CNVD-2018-05711)

Polaris Office is an office software developed by INFRAWARE of Korea. You can view and edit Word documents, Excel tables, Microsoft Office PowerPoint slides and other commonly used office documents. A memory access overflow vulnerability exists in PWord.exe of Polaris Office 2017 when handling...

Memory Access Overflow Vulnerability in Polaris Office 2017 (CNVD-2018-05710)

Polaris Office is an office software developed by INFRAWARE of Korea. You can view and edit Word documents, Excel tables, Microsoft Office PowerPoint slides and other commonly used office documents. A memory access overflow vulnerability exists in PWord.exe of Polaris Office 2017 when handling...

SoftZone office demo prone to memory overflow vulnerability

SoftZone Office RZoffice is an office software, which is compatible with MS Office and consists of three parts: word processing, spreadsheet and presentation. A memory overflow vulnerability exists in RZoffice Presentations.exe when processing special ppt files. An attacker can exploit the...

Memory Access Overflow Vulnerability in Extreme Office 2017 v1.0.3.2

Extreme Office is a minimal office office software developed by Beijing Haiteng Times Technology Co., Ltd. that supports the creation, editing and reading of Extreme Writing, Extreme Forms and Extreme Presentations as well as a simple interface and easy operation. Extreme Writing in Extreme Offic...

Mozilla: Integer overflow in Skia library during edge builder allocation (MFSA 2018-03)

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, a...

UBUNTU-CVE-2018-5095

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, a...

The vulnerability of the Thermal Driver temperature sensor driver in the Android operating system allows a hacker to gain increased privileges.

The vulnerability of the Thermal Driver temperature sensor driver in the Android operating system is related to memory buffer overflow and lack of access control mechanisms. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

Vulnerability of the JavaScript ChakraCore kernel and Microsoft Edge browsers, caused by operations beyond the buffer in memory, allowing attackers to gain control of the current user’s rights

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges of the current user...

MGASA-2018-0053 Updated curl packages fix security vulnerability

If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar. The issue pertains to the function that loads cookies into memory, which reads the specified file...