CVE-2017-15316

The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334C00 and Mate 9 Pro Huawei smart phones with software before LON-AL00B 8.0.0.334C00 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application ca...

CVE-2017-15316

The CVE-2017-15316 issue is a memory double free vulnerability in Huawei’s Mate 9 Mate 9 Pro GPU driver (MHA-AL00B 8.0.0.334(C00) / LON-AL00B 8.0.0.334(C00)). The flaw exists in the Mali GPU driver and can be triggered when a user installs a malicious app calling a specific API, potentially crash...

FreeBSD : libXcursor -- integer overflow that can lead to heap buffer overflow (ddecde18-e33b-11e7-a293-54e1ad3d6335)

The freedesktop.org project reports : It is possible to trigger heap overflows due to an integer overflow while parsing images and a signedness issue while parsing comments. The integer overflow occurs because the chosen limit 0x10000 for dimensions is too large for 32 bit systems, because each...

Linux Kernel 4.13 (Debian 9) - Local Privilege Escalation

/ disablemapminadd.c / / / include include include include include include include / offsets might differ, kernel was custom compiled you can read vmlinux and caculate the offset when testing / / define OFFSETKERNELBASE 0x000000 / define MMAPMINADDR 0x1101de8 define DACMMAPMINADDR 0xe8e810 / get...

The vulnerability of the Adobe Digital Editions e-book reading program, caused by an operation that goes beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Digital Editions e-book reading program arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Multiple Huawei products IKEv2 protocol out-of-bounds writing vulnerability

Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. An out-of-bounds write vulnerability exists in the...

The vulnerability of the BigFix Platform, a management platform for IT equipment, relates to the use of memory after it is freed. This allows an attacker to execute arbitrary code.

The vulnerability of the BigFix Platform management platform is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

USN-3494-1: XML::LibXML vulnerability

It was discovered that XML::LibXML incorrectly handled memory when processing a replaceChild call. A remote attacker could possibly use this issue to execute arbitrary code...

USN-3493-1: Exim vulnerability

It was discovered that Exim incorrectly handled memory in the ESMTP CHUNKING extension. A remote attacker could use this issue to cause Exim to crash, resulting in a denial of service, or possibly execute arbitrary code. The default compiler options for affected releases should reduce the...

MGASA-2017-0424 Updated vlc packages fix security vulnerability

avcodec 2.2.x, as used in VideoLAN VLC media player before 2.2.7, allows out-of-bounds heap memory write due to calling memcpy with a wrong size, leading to a denial of service application crash or possibly code execution CVE-2017-10699. The VLC packages have been updated to version 2.2.8, which...

CVE-2017-8141

The CVE-2017-8141 entry concerns a memory double-free vulnerability in the Touch Panel (TP) driver of Huawei P10 Plus smartphones with software versions prior to VKY-AL00C00B153. Exploitation requires root privileges and tricking a user into installing a malicious app; the app can spawn multiple ...

CVE-2017-8140

CVE-2017-8140 affects Huawei P9 Plus devices with firmware versions older than VIE-AL10BC00B353, where the soundtrigger driver contains a memory double-free vulnerability. An attacker can entice a user to install a malicious app, which may create multiple threads and attempt to free specific memo...

CVE-2017-8140

The soundtrigger driver in P9 Plus smart phones with software versions earlier than VIE-AL10BC00B353 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can start multiple threads and try to free specific memory, which cou...

openSUSE Security Update : GraphicsMagick (openSUSE-2017-1276)

This update for GraphicsMagick fixes the following security issues : - CVE-2017-13776: denial of service issue in ReadXBMImage in a coders/xbm.c bsc1056429 - CVE-2017-13777: denial of service issue in ReadXBMImage in a coders/xbm.c bsc1056426 - CVE-2017-13134: heap-based buffer over-read allowing...

CVE-2017-11854

Microsoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service Pack 3 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page...

The vulnerability of the Internet Explorer browser, related to improper handling of objects in memory, allows a malicious actor to execute arbitrary code.

The vulnerability of the Internet Explorer browser is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page...

Microsoft Edge browser’s vulnerability, related to improper processing of JavaScript object instances in memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge relates to the improper handling of JavaScript objects in memory by the kernel. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page...

WPS docreader.dll Memory Out-of-Bounds Read Vulnerability

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory out-of-bounds read vulnerability exists in the drCreateSource3Ex function in docreader.dll in WPS, which is caused by the program failing to properly handle malformed wps files resulting in...

CVE-2017-2892

An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT packet can cause an arbitrary out-of-bounds memory read and write potentially resulting in information disclosure, denial of service and remote code...