Out-of-Bounds (OOB) Reads

pillow is vulnerable to out-of-bounds read. Lack of checks for the end of the input buffer leads to an OOB read in SgiRleDecode.c...

CVE-2020-28636

CGAL CGAL-5.1.1 contains a code-execution vulnerability (CVE-2020-28636) in the Nef_S2/SNC_io_parser.h SNC_io_parser::read_sloop(), where an attacker-supplied input can trigger an out-of-bounds read and potentially compromise memory. Connected advisories confirm this CVE among others and note fix...

CVE-2020-28636

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsloop slh-twin An attacker can provide malicious input to trigger this vulnerability...

CVE-2020-28601

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef2/PMioparser.h PMioparser::readvertex Faceof OOB read. An attacker can provide malicious input to trigger this vulnerability...

CVE-2020-35636

CVE-2020-35636 is a CGAL (libcgal CGAL-5.1.1) vulnerability affecting the Nef_S2/SNC_io_parser.h read_sface() path, where sfh->volume() can trigger an out-of-bounds read leading to code execution. Connected advisories confirm an OOB read vulnerability in CGAL’s Nef polygon-parsing code, with m...

CVE-2020-28601

CVE-2020-28601 is a code-execution–grade out-of-bounds read in CGAL libcgal CGAL-5.1.1, specifically in Nef_2/PM_io_parser.h PM_io_parser::read_vertex() (Face_of[] OOB read). Multiple connected advisories confirm an OOB read vulnerability in CGAL’s Nef polygon-parsing path, potentially enabling c...

CVE-2020-28636

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsloop slh-twin An attacker can provide malicious input to trigger this vulnerability...

CVE-2020-35628

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsloop slh-incidentsface. An attacker can provide malicious input to trigger this vulnerability...

CVE-2020-35636

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in NefS2/SNCioparser.h SNCioparser::readsface sfh-volume OOB read. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution...

EulerOS 2.0 SP2 : freerdp (EulerOS-SA-2021-1295)

According to the versions of the freerdp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in updatereadbitmapdata that allows client memory to be read to an imag...

Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2021-1066)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2525-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2525-1] wavpack security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2525-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 15, 2021 https://wiki.debian.org/LTS -...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:3544-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bug fixes. The following security bugs were fixed : CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote...

SUSE SLES15 Security Update : kernel (SUSE-SU-2020:3513-1)

The SUSE Linux Enterprise 15 SP1 RT kernel was updated to receive various security and bug fixes. The following security bugs were fixed : CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remot...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2020:3272-1)

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bug fixes. The following security bugs were fixed : CVE-2020-25656: Fixed a concurrency use-after-free in vtdokdgkbioctl bnc1177766. CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in...

ASB-A-166268541

In extendframehighbd of restoration.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

SUSE-SU-2020:3441-1 Security update for the Linux Kernel (Live Patch 17 for SLE 15)

This update for the Linux Kernel 4.12.14-15047 fixes several issues. The following security issues were fixed: - CVE-2020-0430: Fixed an OOB read in skbheadlen of /include/linux/skbuff.h bsc1176723, bsc1178003. - CVE-2020-12351: Fixed a type confusion while processing AMP packets aka...

ReadyTalk Avian JVM FileOutputStream.write() Integer Overflow

Vulnerability title: Avian JVM FileOutputStream.write Integer Overflow Author: Pietro Oliva Vendor: ReadyTalk Product: Avian JVM Affected version: 1.2.0 before 27th October 2020 Fixed Version: 1.2.0 since 27th October 2020 Description: The issue is located in the FileOutputStream.write method...

ASB-A-161362564

In sendvc of ressend.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...