ImageMagick Denial of Service Vulnerability (CNVD-2017-09693)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'SetPixelChannelAttributes' function in ImageMagick version 7.0.5-7 Q1...

Android Security Bulletin—June 2017Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of June 05, 2017 or later address all of these issues. Refer to the Pixel and Nexus update schedule to learn how to check a device's security patch level. Partners were...

Google Android Qualcomm Wi-Fi Driver Denial of Service Vulnerability (CNVD-2017-10594)

Google Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Qualcomm Wi-Fi Driver is a wifi driver. A denial of service vulnerability exists in the Qualcomm Wi-Fi Driver in Android on Nexus 5X, Pixel and Pixel XL devices. An attacker...

Google Pixel/Pixel XL Qualcomm Video Driver Information Disclosure Vulnerability

Google Pixel/Pixel XL are both a smartphone from the American company Google Google. Google Pixel/Pixel XL suffers from an information disclosure vulnerability. The vulnerability can be exploited by an attacker to gain access to potentially sensitive information, leading to further attacks...

Google Pixel Qualcomm Sound Codec Driver Elevation of Privilege Vulnerability

Google Pixel is a smartphone from the American company Google Google. An elevation of privilege vulnerability exists in the Google Pixel Qualcomm Sound Codec Driver. An attacker can exploit the vulnerability to execute arbitrary code using elevated kernel privileges...

Google Pixel/Pixel XL Qualcomm USB Driver Information Disclosure Vulnerability

Google Pixel/Pixel XL are both a smartphone from the American company Google Google. Google Pixel/Pixel XL suffers from an information disclosure vulnerability. The vulnerability can be exploited by an attacker to gain access to potentially sensitive information, leading to further attacks...

UBUNTU-CVE-2017-9111

In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code...

MulticoreWare x265 Integer Overflow Vulnerability

MulticoreWare x265 is a HEVC encoder developed by MulticoreWare USA. An integer overflow vulnerability exists in pixel-a.asm in MulticoreWare x265 version 2.4 and earlier. An attacker can exploit this vulnerability to cause a denial of service to the encrypted process with the help of a smaller...

UBUNTU-CVE-2017-8906

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the x265encoderencode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in th...

CVE-2017-8906

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the x265encoderencode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in th...

CVE-2017-8906

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the x265encoderencode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in th...

Integer overflow

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the x265encoderencode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in th...

CVE-2017-8906

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the x265encoderencode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in th...

CVE-2017-8906

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the x265encoderencode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in th...

Google Android Qualcomm sound codec driver elevation of privilege vulnerability

AndroidonPixel and PixelXL is an open source Linux-based operating system for the Pixel and PixelXL developed by Google and the Open Handheld Alliance OHA.Qualcommsoundcodecdriver is one of the sound decoder Qualcommsoundcodecdriver is one of the sound decoder driver components. An elevation of...

Google Android Synaptics touchscreen driver information disclosure vulnerability

Android on Pixel and Pixel XL is a Linux-based open source operating system for the Pixel and Pixel XL smartphones developed by Google and the Open Handheld Alliance OHA, of which Synaptics touchscreen Driver is one. Synaptics touchscreen Driver is one of the touchscreen drivers. An information...

Android Qualcomm sound driver elevation of privilege vulnerability (CNVD-2017-06114)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm Sound Driver is a sound driver developed by Qualcomm. The Qualcomm sound driver in Android on Pixel and Pixel XL devices is vulnerable to a power lifting vulnerability. An...

Android Qualcomm bootloader boost vulnerability

Android on Google Pixel XL, etc. is an open source Linux-based operating system for Google Pixel XL, etc. smart devices developed by Google Inc. and the Open Handheld Alliance OHA.Qualcomm bootloader is one of the programs used in the... Qualcomm bootloader is a bootloader developed by Qualcomm...

Source Code for CIA’s Tool to Track Whistleblowers Leaked by Wikileaks

Wikileaks has just published a new batch of the Vault 7 leak, exposing the documentation and source code for a CIA project known as "Scribbles." Scribbles, a.k.a. the "Snowden Stopper," is a piece of software allegedly designed to embed 'web beacon' tags into confidential documents, allowing the...

UBUNTU-CVE-2017-5465

An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and...