The vulnerability of the image filter in Google Chrome’s Skia library allows a hacker to…

The vulnerability of the Image Filter in the Skia library of Google Chrome browser relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a...

The vulnerability in the implementation of the WebRTC technology in Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

The vulnerability of Google Chrome’s swiftshader library allows attackers to gain unauthorized access to protected information.

The vulnerability of Google Chrome’s Swiftshader library arises from reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

The vulnerability of the WebRTC technology implementation in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the WebRTC technology implemented in Google Chrome browsers arises from reading data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

The vulnerability in the implementation of the WebRTC technology in Google Chrome browser allows a hacker to induce a service failure.

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

The vulnerability of the ParseJSS component in the VideoLAN VLC media player software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ParseJSS component in the VideoLAN VLC media player software arises from reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

The vulnerabilities of the components of the Automationworx Software Suite, including PC Worx, PC Worx Express, and Config+, allow attackers to disclose protected information and execute arbitrary code.

The vulnerability of the components of the Automationworx Software Suite, including PC Worx, PC Worx Express, and Config+, lies in the ability to read data beyond the designated memory area. Exploiting this vulnerability allows an attacker to disclose sensitive information and execute arbitrary...

CVE-2019-13325

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.909. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

The vulnerability of the hdAudio.sys component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the hdAudio.sys component in the Windows operating system is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

DEBIAN-CVE-2019-12529

An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is configured to use Basic Authentication, the Proxy-Authorization header is parsed via uudecode. uudecode determines how many bytes will be decoded by iterating over the input and checki...

EUVD-2019-4124

An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is configured to use Basic Authentication, the Proxy-Authorization header is parsed via uudecode. uudecode determines how many bytes will be decoded by iterating over the input and checki...

The vulnerability in the implementation of 3D-acceleration functions for hypervisors such as VMware ESXi, VMware Fusion, and Vmware Workstation allows attackers to exploit it to disclose sensitive information or cause system failures during maintenance.

The vulnerability of the 3D-acceleration function implementation in VMware ESXi, VMware Fusion, and Vmware Workstation relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause system failur...

The vulnerability of the HostScan component of the Cisco AnyConnect Secure Mobility Client software for secure mobile connectivity applications, which runs on Linux operating systems, allows a hacker to disclose protected information.

The vulnerability of the HostScan component of the Cisco AnyConnect Secure Mobility Client software for Linux operating systems relates to the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information through specially...

CVE-2018-13885

Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9650, MDM9655, QCS605, Qualcomm 215, SD...

CVE-2018-13885

Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9650, MDM9655, QCS605, Qualcomm 215, SD...

CVE-2018-13885

CVE-2018-13885 describes a memory overread in Qualcomm Snapdragon components (e.g., Snapdragon Auto/Compute/IoT, mobile, wearables) that could allow access to sensitive data. The issue is documented across multiple sources (NVD, Red Hat, CVE list, PRION) with consistent wording: a memory overread...

(Vulnerability) The vulnerability of the binary system for storing service information via systemd-journald arises from operations that go beyond the buffer in memory. This allows an attacker to trigger a service failure or execute code with journald privileges.

The vulnerabilities of the binary system for storing service information, systemd-journald and systemd-journal-remote, are due to operations that go beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow an attacker to cause a service failure or execute code with...

The vulnerability of the multimedia library libvorbis, related to the escape from memory buffer reading, allows attackers to cause service failures or compromise data confidentiality and integrity.

The vulnerability of the multimedia library libvorbis is related to an error that causes reading beyond the allocated buffer memory space. Exploiting this vulnerability can allow a malicious actor to cause service failures or compromise data confidentiality and integrity through the use of...

The vulnerability of the do_core_note function in the console command “file” allows a perpetrator to trigger a service failure.

The vulnerability of the docorenote function in the console command file is related to an error that causes reading beyond the allocated memory buffer. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially crafted ELF format file...

UBUNTU-CVE-2018-18765

An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffer over-read in mgmqttnextsubscribetopic. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially...