CVE-2019-2271

Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...

CVE-2019-10563

Buffer over-read can occur in fast message handler due to improper input validation while processing a message from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053...

CVE-2019-10563

CVE-2019-10563 describes a buffer over-read in the fast message handler when processing a firmware message in Qualcomm Snapdragon firmware across multiple platforms (APQ8053, APQ8096AU, MSM8996AU, MSM8998, QCN7605, QCS405, QCS605, SDA660, SDM636, SDM660, SDX20, SDX24, etc.). Root cause: improper ...

CVE-2019-2271: Out-of-bounds Read

Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...

CVE-2019-19204: Out-of-bounds Read

An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as fetchrangequantifier in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read...

CVE-2019-10563: Improper Input Validation

Buffer over-read can occur in fast message handler due to improper input validation while processing a message from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053...

PT-2019-11932

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description A buffer over-read issue can occur due to improper input validation in the fast message handler when processing a message from firmware. This issue affects various Qualco...

PT-2019-16346

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description A buffer over read issue can occur while parsing downlink session management OTA messages if the network sends unintended values. This issue affects various Qualcomm...

CVE-2019-19203: Out-of-bounds Read

An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function gb18030mbcenclen in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read...

CVE-2019-16200

GNU Serveez through 0.2.2 has an Information Leak. An attacker may send an HTTP POST request to the /cgi-bin/reader URI. The attacker must include a Content-length header with a large positive value that, when represented in 32 bit binary, evaluates to a negative number. The problem exists in the...

Heap overflow

GNU Serveez through 0.2.2 has an Information Leak. An attacker may send an HTTP POST request to the /cgi-bin/reader URI. The attacker must include a Content-length header with a large positive value that, when represented in 32 bit binary, evaluates to a negative number. The problem exists in the...

PT-2019-14576

Name of the Vulnerable Software and Affected Versions GNU Serveez versions prior to 0.2.3 Description The issue allows an attacker to send an HTTP POST request to the "/cgi-bin/reader" API endpoint, including a Content-length header with a large positive value that, when represented in 32-bit...

CVE-2019-16200: Incorrect Conversion between Numeric Types

GNU Serveez through 0.2.2 has an Information Leak. An attacker may send an HTTP POST request to the /cgi-bin/reader URI. The attacker must include a Content-length header with a large positive value that, when represented in 32 bit binary, evaluates to a negative number. The problem exists in the...

SUSE SLED15 / SLES15 Security Update : ncurses (SUSE-SU-2019:2997-1)

This update for ncurses fixes the following issues : Security issues fixed : CVE-2019-17594: Fixed a heap-based buffer over-read in the ncfindentry function bsc1154036. CVE-2019-17595: Fixed a heap-based buffer over-read in the fmtentry function bsc1154037. Non-security issue fixed: Removed...

SUSE-SU-2019:2997-1 Security update for ncurses

This update for ncurses fixes the following issues: Security issues fixed: - CVE-2019-17594: Fixed a heap-based buffer over-read in the ncfindentry function bsc1154036. - CVE-2019-17595: Fixed a heap-based buffer over-read in the fmtentry function bsc1154037. Non-security issue fixed: - Removed...

jhead buffer over-read vulnerability

jhead is a command line driven utility for extracting digital camera settings from the Exif format files used by many digital cameras. A buffer over-read vulnerability exists in ReadJpegSections and processSOFn in jpgfile.c in jhead 3.03, which can be exploited by an attacker to cause a denial of...

openSUSE Security Update : ImageMagick (openSUSE-2019-2519)

This update for ImageMagick fixes the following issues : Security issues fixed : - CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage bsc1146213. - CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser bsc1146212. - CVE-2019-15141: Fixed a divide-by-zero...

CVE-2019-19035

jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and processSOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file...

CVE-2019-19035

jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and processSOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file...

CVE-2019-19035

jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and processSOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file...