CVE-2016-10210

The CVE affects libyara/lexer.l in YARA 3.5.0, where the yy_get_next_buffer handling of crafted rules can trigger a NULL pointer dereference, leading to remote denial of service (application crash). Public references in the vulnerability entry and open advisories show affected product and impact:...

CVE-2017-5924

libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted rule that is mishandled in the yrcompilerdestroy function...

PT-2017-17692

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.5 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted PDF document. Recommendations For PoDoFo version 0.9.5, at the moment...

PT-2017-17694

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.5 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted PDF document. Recommendations For PoDoFo version 0.9.5, consider...

PT-2017-7819

Name of the Vulnerable Software and Affected Versions Safari Technology Preview Release 18 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation violation and application crash, via crafted JavaScript code. This is due to a "type confusion" in the...

CVE-2017-2417

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreGraphics" component. It allows remote attackers to cause a denial of service infinite recursi...

CVE-2017-2417: Loop with Unreachable Exit Condition

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreGraphics" component. It allows remote attackers to cause a denial of service infinite recursi...

CVE-2015-4556: Improper Input Validation

The string-translate procedure in the data-structures unit in CHICKEN before 4.10.0 allows remote attackers to cause a denial of service crash...

CVE-2016-4912

The xrealloc function in xlspxmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a large number of crafted packets, which triggers a memory allocation failure...

CVE-2017-5508

Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to cause a denial of service application crash via a crafted TIFF file...

CVE-2017-7246

Stack-based buffer overflow in the pcre32copysubstring function in pcreget.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service WRITE of size 268 or possibly have unspecified other impact via a crafted file...

CVE-2016-9397

The jpcdequantize function in jpcdec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...

CVE-2016-9395: Improper Input Validation

The jasseq2dcreate function in jasseq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service assertion failure via a crafted file...

PT-2017-10115

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.22 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, via unspecified vectors. This is related to the calcstepsizes function in jpc dec.c. The estimated number of...

CVE-2016-9390: Improper Input Validation

The jasseq2dcreate function in jasseq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service assertion failure via a crafted image file...

PT-2017-10107

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.14 Description The issue allows remote attackers to cause a denial of service via a crafted image file, specifically through the jas seq2d create function in jas seq.c. Recommendations For versions prior to...

PT-2017-10204

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.25 Description The issue is caused by an integer overflow in the jas image.c file, which allows remote attackers to cause a denial of service, resulting in an application crash, by providing a crafted file...

CVE-2015-4645

Integer overflow in the readfragmenttable4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial of service application crash via a crafted input, which triggers a stack-based buffer overflow...

PT-2017-7187

Name of the Vulnerable Software and Affected Versions LibTIFF affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption and a crash, by using a crafted tiff file. Recommendations At the moment, there is no informati...

CVE-2017-5849

CVE-2017-5849 affects netpbm's tiffttopnm in version 10.47.63, where improper use of libtiff TIFFRGBAImageGet creates the possibility of an out-of-bounds read/write via a crafted TIFF image, leading to denial of service. The connected advisories note affected packages across Linux distros (e.g., ...