CVE-2020-13112

An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093...

CVE-2020-13112

An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093...

CVE-2020-13112

An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093...

CVE-2020-13112

An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093...

The vulnerability of the microDNS library in the VideoLAN VLC media player software allows a hacker to induce a service failure or execute arbitrary code.

The vulnerability of the microDNS library in the VideoLAN VLC media player lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code through a specially crafted request...

imlib2 integer overflow vulnerability (CNVD-2021-28272)

imlib2 is a graphics library for fast file loading, saving, rendering and manipulation. An integer overflow vulnerability exists in modules/loaders/loaderico.c in imlib2 version 1.6.0. An attacker can exploit this vulnerability to cause invalid memory allocations and out-of-bounds reads via icons...

CVE-2020-12761

modules/loaders/loaderico.c in imlib2 1.6.0 has an integer overflow with resultant invalid memory allocations and out-of-bounds reads via an icon with many colors in its color map...

Integer overflow

modules/loaders/loaderico.c in imlib2 1.6.0 has an integer overflow with resultant invalid memory allocations and out-of-bounds reads via an icon with many colors in its color map...

CVE-2020-12761

modules/loaders/loaderico.c in imlib2 1.6.0 has an integer overflow with resultant invalid memory allocations and out-of-bounds reads via an icon with many colors in its color map...

UBUNTU-CVE-2020-12761

modules/loaders/loaderico.c in imlib2 1.6.0 has an integer overflow with resultant invalid memory allocations and out-of-bounds reads via an icon with many colors in its color map...

CVE-2020-12761

modules/loaders/loaderico.c in imlib2 1.6.0 has an integer overflow with resultant invalid memory allocations and out-of-bounds reads via an icon with many colors in its color map...

CVE-2020-12761

modules/loaders/loaderico.c in imlib2 1.6.0 has an integer overflow with resultant invalid memory allocations and out-of-bounds reads via an icon with many colors in its color map...

CVE-2020-12761

CVE-2020-12761 affects imlib2 1.6.0, where modules/loaders/loader_ico.c contains an integer overflow that enables invalid memory allocations and out-of-bounds reads when processing ICO icons with many colors in the color map. Public writeups (Ubuntu/SUSE/CNVD/OSV entries) describe it as enabling ...

Out-of-bound Reads

FreeRDP is vulnerable to Out-of-bound Reads. The vulnerability exists because it does not properly handle the updatereadiconinfo data boundary checks, leading to a leakage of amount of client memory 32bit unsigned - 4GB to an intermediate buffer and crashing an application or unauthorized storage...

Out-of-Bound Reads

libfreerdp.so is vulnerable to Out-of-Bound Reads. The vulnerability exists because it does not properly perform the data boundary check of updatereadbitmapdata, leaking the memory to an image buffer reflecting the result on screen as colour...

Security Advisory 2020-05-06-1 - umdns out-of-bounds reads of heap data and possible buffer overflow (CVE-2020-11750)

DESCRIPTION umdns in OpenWrt through 18.06.8 and 19.07.2 has potential for out-of-bounds reads of heap data and possible buffer overflow. umdns is the OpenWrt Multicast DNS Daemon. We have not been made aware of any exploits at this time, however users are advised to update the umdns package to...

Design/Logic Flaw

Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 all published versions enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash...

CVE-2020-8485

Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 all published versions enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash...

CVE-2020-8484

Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI all published versions enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash...

ONKYO Onkyo TX-NR585 Information Disclosure Vulnerability

The ONKYO Onkyo TX-NR585 is a home audio/video receiver from ONKYO Japan. A security vulnerability exists in the ONKYO Onkyo TX-NR585 using firmware version 1000-0000-000-0008-0000. The vulnerability can be exploited by a remote attacker to read sensitive files with the help of the...