17249 matches found
CVE-2019-20089
Affected software: GoPro GPMF-parser 1.2.3. Issue: a heap-based buffer over-read in GPMF_SeekToSamples within GPMF_parse.c used for size calculation. Root cause per description: reading beyond allocated memory boundaries, enabling an out-of-bounds read. Impact described in the sources as a heap/b...
Buffer Over-read
libmatio.so is vulnerable to buffer over-read vulnerability. The vulnerability exists because a stack-based buffer overflow occurs in the function ReadNextCell in mat5.c during the reading of an invalid next cell of the cell array...
PT-2019-16084
Name of the Vulnerable Software and Affected Versions GoPro GPMF-parser version 1.2.3 Description The issue is related to a heap-based buffer over-read in the GPMF seekToSamples function, located in GPMF-parse.c, which is part of the "matching tags" feature. Recommendations For GoPro GPMF-parser...
PT-2019-16083
Name of the Vulnerable Software and Affected Versions GoPro GPMF-parser version 1.2.3 Description The issue is related to a heap-based buffer over-read in the GPMF Next function located in GPMF parser.c. Recommendations For GoPro GPMF-parser version 1.2.3, consider applying a patch or fix that...
CVE-2019-20087: Out-of-bounds Read
GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMFseekToSamples in GPMF-parse.c for the "matching tags" feature...
PT-2019-16086
Name of the Vulnerable Software and Affected Versions GoPro GPMF-parser version 1.2.3 Description The issue is related to a heap-based buffer over-read in the GPMF SeekToSamples function within GPMF parse.c, specifically affecting the size calculation. Recommendations For GoPro GPMF-parser versio...
CVE-2019-20088: Out-of-bounds Read
GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GetPayload in GPMFmp4reader.c...
PT-2019-16085
Name of the Vulnerable Software and Affected Versions GoPro GPMF-parser version 1.2.3 Description The issue is related to a heap-based buffer over-read in the GetPayload function located in the GPMF mp4reader.c file. Recommendations For GoPro GPMF-parser version 1.2.3, update to a newer version...
CVE-2019-20086: Out-of-bounds Read
GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMFNext in GPMFparser.c...
CVE-2019-20089: Out-of-bounds Read
GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMFSeekToSamples in GPMFparse.c for the size calculation...
PT-2019-6371
Name of the Vulnerable Software and Affected Versions ezXML versions 0.8.3 through 0.8.6 Description The issue is related to the ezxml decode function in the ezXML library, which performs incorrect memory handling while parsing crafted XML files. This leads to a heap-based buffer over-read in the...
CVE-2019-15903
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XMLGetCurrentLineNumber or XMLGetCurrentColumnNumber then resulted in a heap-based buffer over-read. Mitigation Mitigation for this issue is either...
CVE-2019-20017
A stack-based buffer over-read was discovered in MatVarReadNextInfo5 in mat5.c in matio 1.5.17...
CVE-2019-20017
A stack-based buffer over-read was discovered in MatVarReadNextInfo5 in mat5.c in matio 1.5.17...
CVE-2019-20018
A stack-based buffer over-read was discovered in ReadNextCell in mat5.c in matio 1.5.17...
CVE-2019-20020
A stack-based buffer over-read was discovered in ReadNextStructField in mat5.c in matio 1.5.17...
CVE-2019-20021
A heap-based buffer over-read was discovered in canUnpack in pmach.cpp in UPX 3.95 via a crafted Mach-O file...
CVE-2019-20020
A stack-based buffer over-read was discovered in ReadNextStructField in mat5.c in matio 1.5.17...
