CVE-2019-20021

CVE-2019-20021 affects UPX, where UPX 3.95 contains a heap-based buffer over-read in canUnpack() within p_mach.cpp when processing crafted Mach-O files. OpenSUSE/Fedora advisories indicate the fix is in UPX 3.96, which patches this vulnerability (and related CVEs) by updating to 3.96. Practical i...

CVE-2019-20021

A heap-based buffer over-read was discovered in canUnpack in pmach.cpp in UPX 3.95 via a crafted Mach-O file...

CVE-2019-20021

A heap-based buffer over-read was discovered in canUnpack in pmach.cpp in UPX 3.95 via a crafted Mach-O file...

CVE-2019-20011

An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decodeR13R2000 in decode.c...

CVE-2019-20011

An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decodeR13R2000 in decode.c...

CVE-2019-20011

CVE-2019-20011 is a heap-based buffer over-read in GNU LibreDWG up to version 0.9.3 (decode_R13_R2000 in decode.c). OpenSUSE/SUSE advisories indicate this was addressed by releasing LibreDWG 0.9.3 with overflow checks and related fixes, and other documents corroborate the same vulnerability class...

PT-2019-16055

Name of the Vulnerable Software and Affected Versions matio version 1.5.17 Description A stack-based buffer over-read was discovered in the ReadNextStructField function in mat5.c. Recommendations For matio version 1.5.17, at the moment, there is no information about a newer version that contains ...

PT-2019-16052

Name of the Vulnerable Software and Affected Versions matio version 1.5.17 Description A stack-based buffer over-read issue was found in the Mat VarReadNextInfo5 function in mat5.c. Recommendations For matio version 1.5.17, at the moment, there is no information about a newer version that contain...

CVE-2019-20017: Out-of-bounds Read

A stack-based buffer over-read was discovered in MatVarReadNextInfo5 in mat5.c in matio 1.5.17...

CVE-2019-20018: Out-of-bounds Read

A stack-based buffer over-read was discovered in ReadNextCell in mat5.c in matio 1.5.17...

CVE-2019-20011: Out-of-bounds Read

An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decodeR13R2000 in decode.c...

PT-2019-16053

Name of the Vulnerable Software and Affected Versions matio version 1.5.17 Description A stack-based buffer over-read issue was found in the ReadNextCell function in mat5.c. Recommendations For matio version 1.5.17, at the moment, there is no information about a newer version that contains a fix...

CVE-2019-20021: Out-of-bounds Read

A heap-based buffer over-read was discovered in canUnpack in pmach.cpp in UPX 3.95 via a crafted Mach-O file...

CentOS 6 : freetype (CESA-2019:4254)

An update for freetype is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2019-20020: Out-of-bounds Read

A stack-based buffer over-read was discovered in ReadNextStructField in mat5.c in matio 1.5.17...

PT-2019-16046

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.92 Description A heap-based buffer over-read issue was discovered in the decode R13 R2000 function in decode.c. Recommendations For GNU LibreDWG version 0.92, at the moment, there is no information about a newer version...

CVE-2019-20005

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing a crafted XML file, performs incorrect memory handling, leading to a heap-based buffer over-read while running strchr starting with a pointer after a '\0' character where the processing of a string was...

Heap overflow

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing a crafted XML file, performs incorrect memory handling, leading to a heap-based buffer over-read while running strchr starting with a pointer after a '\0' character where the processing of a string was...

CVE-2019-20005

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing a crafted XML file, performs incorrect memory handling, leading to a heap-based buffer over-read while running strchr starting with a pointer after a '\0' character where the processing of a string was...

CVE-2019-20005

The CVE-2019-20005 issue affects ezXML 0.8.3–0.8.6: during ezxml_decode, parsing a crafted XML file triggers incorrect memory handling, causing a heap-based buffer over-read when strchr() is used after a '\0' (end of a string). Multiple advisories (SUSE/SLES15, Mageia, openSUSE, etc.) reference e...