CVE-2016-10460

Technical details for CVE-2016-10460 are not publicly provided in the connected documents. The available description notes a buffer over-read due to missing packet-length validation in Qualcomm vendor opcodes on affected Android devices. Monitor for updates and official patches.

PT-2018-4491

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue arises in the widevine dash cmd handler function where response buffers are passed to widevine commands without proper validation. These buffers contain values suc...

Debian: Security Advisory (DSA-4129-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1231-1 : graphicsmagick security update

The NSFocus Security Team discovered multiple security issues in Graphicsmagick, a collection of image processing tools. Several heap-based buffer over-reads may lead to a denial of service application crash or possibly have other unspecified impact when processing a crafted file. For Debian 7...

[SECURITY] [DLA 1231-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.16-1.1+deb7u16 CVE ID : CVE-2017-17498 CVE-2017-17500 CVE-2017-17501 CVE-2017-17502 CVE-2017-17503 CVE-2017-17782 CVE-2017-17912 CVE-2017-17915 Debian Bug : 884905 The NSFocus Security Team discovered multiple security issues in Graphicsmagick, a collection ...

CVE-2017-7210

objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads of size 1 and size 8 while handling corrupt STABS enum type strings in a crafted object file, leading to program crash...

Heap overflow

objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads of size 1 and size 8 while handling corrupt STABS enum type strings in a crafted object file, leading to program crash...

CVE-2017-7210

objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads of size 1 and size 8 while handling corrupt STABS enum type strings in a crafted object file, leading to program crash...

CVE-2017-7210

objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads of size 1 and size 8 while handling corrupt STABS enum type strings in a crafted object file, leading to program crash...

CVE-2017-7210

objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads of size 1 and size 8 while handling corrupt STABS enum type strings in a crafted object file, leading to program crash...

CVE-2017-7210

objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads of size 1 and size 8 while handling corrupt STABS enum type strings in a crafted object file, leading to program crash...

libical 0.47 / 1.0 Crash

Hello lists Attached is a test case for causing a crash in libical 0.47 shipped with Thunderbird and this was also tested against 1.0 various versions shipped with various email clients. ================================================================= ==24662==ERROR: AddressSanitizer: SEGV on...

Perl 5.22 VDir::MapPathA/W Out-Of-Bounds Reads / Buffer Over-Reads

---------------------------------------------------------------- Name: Perl 5.22 VDir::MapPathA/W Out-of-bounds Reads and Buffer Over-reads Discovered By: John Leitch, Bryce Darling Url: http://autosectools.com/Perl-VDir-MapPath-Out-of-bounds-Read Report:...

Internet Bug Bounty: Perl 5.22 VDir::MapPathA/W Out-of-bounds Reads and Buffer Over-reads

I have reported multiple vulnerabilities in Perl that have now been fixed. https://rt.perl.org/Public/Bug/Display.html?id=126755 --- Perl 5.22 suffers from two out-of-bounds read and multiple small buffer over-read vulnerabilities in the VDir::MapPathA and VDir::MapPathW functions that could...

Internet Bug Bounty: PyFloat_FromString & PyNumber_Long Buffer Over-reads

http://bugs.python.org/issue24802 http://bugs.python.org/issue24803...

CVE-2012-3418

libpcp in Performance Co-Pilot PCP before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a PDU with the numcreds field value greater than the number of actual elements to the pmDecodeCreds function in pcreds.c; 2 the string byte number value t...