9273 matches found
php: Information disclosure in exif_read_data()
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exifreaddata function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure o...
oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c
An out-of-bounds read vulnerability was found in the way Oniguruma handled regular expressions with GB18030 character encoding. A UChar pointer is dereferenced without checking if it passed the end of the matched string, leading to a heap-based buffer over-read. A remote attacker could abuse this...
QEMU 缓冲区错误漏洞
QEMU is a suite of analog processor software. QEMU suffers from a buffer overflow vulnerability. An attacker could exploit this vulnerability to cause a stack buffer over-read via a value obtained from a host controller driver...
DEBIAN-CVE-2020-29129
ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length...
UBUNTU-CVE-2020-29129
ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length...
PT-2020-6961 · Libslirp +9 · Libslirp +9
Name of the Vulnerable Software and Affected Versions: libslirp versions 4.3.1 and earlier Description: The issue is related to a buffer over-read in the slirp.c component of the libslirp TCP-IP emulator. This occurs because the component attempts to read a certain amount of header data, even if ...
The vulnerability of the DHCP subsystem of Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM) allows attackers to disclose protected information.
The vulnerability of the DHCP subsystem of Intel Active Management Technology AMT and Intel Standard Manageability ISM exists due to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
libslirp 缓冲区错误漏洞
libslirp is a general-purpose TCP-IP emulator for managing virtual network services in a hypervisor. A buffer overread vulnerability exists in libslirp 4.3.1 and earlier versions of slirp.c. The vulnerability stems from slirp.c attempting to read a certain amount of header data even though the...
libslirp 缓冲区错误漏洞
libslirp is a general-purpose TCP-IP emulator for managing virtual network services in a hypervisor. A buffer over-read vulnerability exists in ncsi.c in libslirp 4.3.1 and earlier versions, which stems from ncsi.c attempting to read a certain amount of header data despite having exceeded the tot...
Linux kernel buffer over-read vulnerability
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A buffer over-read vulnerability exists in the fbcon code in Linux kernel versions prior to 5.8.15. A local attacker...
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, which allows a hacker to exploit it to disclose protected information
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
UBUNTU-CVE-2020-28915
A buffer over-read at the framebuffer layer in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def...
Linux kernel 缓冲区错误漏洞
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A buffer over-read vulnerability exists in the fbcon code in Linux kernel versions prior to 5.8.15. A local attacker...
The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer limit in memory, allowing an attacker to execute arbitrary code within the context of the current user.
The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...
The vulnerability of the Adobe Illustrator graphic editor, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of Adobe Illustrator’s graphic editor lies in the reading of data beyond the buffer boundaries in memory when processing created PDF files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...
The vulnerability of the Adobe Illustrator graphic editor, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of Adobe Illustrator’s graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...
The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its ability to read data beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to reading data outside the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...
Maxmind Libmaxminddb Buffer Overflow Vulnerability
Maxmind Libmaxminddb is the U.S. Maxmind company a C code library for processing Maxmind type files. The code library for processing Maxmind DB files, including the format of the geo-ip data, geo-ip can be used to retrieve the target IP information. A security vulnerability exists in libmaxminddb...