Qualcomm TrustZone Bypass

The vulnerability of Qualcomm’s TrustZone microprogramming software lies in a numerical overflow condition that causes an operation to escape outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to bypass existing access control policies...

Qualcomm TrustZone DoS

The vulnerability of Qualcomm’s TrustZone microprogramming software’s Android Secure Execution Environment from the CAF repository is due to a numerical overflow. Exploiting this vulnerability could allow an attacker to cause a system failure or otherwise affect the system...

Qualcomm TrustZone DoS

The vulnerability of the TrustZone technology a part of the DRM subsystem of Qualcomm’s Secure Execution Environment for Android, as provided in the CAF repository, is due to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a system failure or exert...

Novell GroupWise Code Execution

The vulnerability of Novell GroupWise software for collaborative work is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code using the long user name or password...

PDF Viewer Code Execution

The vulnerability of CCITT programs for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud, is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

CVE-2017-5063

A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

PT-2017-3240

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 58.0.3029.81 for Linux, Windows, and Mac Google Chrome version prior to 58.0.3029.83 for Android Description A numeric overflow in the Skia library of Google Chrome allowed a remote attacker to perform an out of...

QEMU DoS

The vulnerability of the emulatedapdufromguest function in the usb/dev-smartcard-reader.c file of the QEMU hardware emulation software, which supports emulation of CCID Card devices, is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker, operating locally, to...

ImageMagick DoS

The vulnerability of the console-based graphic editor ImageMagick is caused by a numerical overflow. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure termination of the application by sending large input data...

Android Bypass Access Restrictions

The vulnerability of the function in app/aboot/aboot.c of the Qualcomm Android operating system is caused by a numerical overflow. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions using specially crafted values...

Symantec Antivirus Code Execution

The vulnerability of the Dec2LHA.dll file in Symantec’s anti-virus protection software is caused by a numerical overflow or buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...

Apache Tomcat Compromise Information Disclosure

A numerical overflow in the java/org/apache/tomcat/util/buf/Ascii.java file in Apache Tomcat when working with a reverse proxy server allows malicious actors operating remotely to carry out an attack with a hidden HTTP request, using a specially crafted Content-Length HTTP header...

PHP Compromise Protected Information

A numerical overflow in the cdfreadpropertyinfo function in the cdf.c file of the Fileinfo component in PHP allows malicious actors operating remotely to cause a service failure abrupt termination of the application by using a specially crafted CDF file...

PHP interpreter Mac OS X Code Execution

The multiple vulnerabilities of the mbflstrcut function ext/mbstring/libmbfl/mbfl/mbfilter.c in the PHP interpreter and the Mac OS X operating system are caused by a numerical overflow. Exploitation of these vulnerabilities could allow an attacker to cause a service failure application terminatio...

Android Privilege Escalation

The multiple vulnerabilities of the minzip/SysUtil.c function in the Recovery Procedure component of the Android operating system are caused by a numerical overflow. Exploiting these vulnerabilities could allow an attacker, operating locally, to enhance their privileges through a specially create...

Android Security Bypass Confidential Information

The vulnerability of the BnCrypto::onTransact function media/libmedia/ICrypto.cpp in the Android operating system is caused by a numerical overflow. Exploiting this vulnerability could allow a malicious actor to bypass security measures and obtain confidential information, leading to incorrect...

Android DoS

The vulnerability of the getCoverageFormat12 function in the CmapCoverage.cpp library of the Minikin operating system in Android is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker acting locally to trigger a service failure long-term reboot through an...

Flash Player Code Execution

The vulnerability of the Flash Player and Adobe Integrated Runtime programs is due to a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a large BitmapData object...

Adobe Acrobat DC Code Execution

The vulnerability of the Adobe Acrobat DC PDF editing program is related to a buffer overflow in the dynamic memory, caused by a numerical overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Flash Player Code Execution

The vulnerability of the Flash Player software is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...