PYSEC-2018-62

An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubiopitchsetunit in pitch/pitch.c, as demonstrated by aubionotes...

CVE-2018-14549

An issue has been found in libwav through 2017-04-20. It is a SEGV in the function wavwrite in libwav.c...

DEBIAN-CVE-2018-14522

An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubiopitchsetunit in pitch/pitch.c, as demonstrated by aubionotes...

DEBIAN-CVE-2018-14521

An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubiosourceavcodecreadframe in io/sourceavcodec.c, as demonstrated by aubiomfcc...

libgig out-of-bounds read vulnerability (CNVD-2018-15177)

libgig is a C++ library for loading, modifying existing and creating new Gigasampler .gig files and DLS downloadable sound level 1/2 files, KORG sample-based instruments .KSF and .KMP files, SoundFont v2 .sf2 files and AKAI sampler data. An out-of-bounds read vulnerability exists in the "update...

Google Chrome - Swiftshader Texture Allocation Integer Overflow

Google Chrome - Swiftshader Texture Allocation Integer Overflow There's a remotely triggerable memory corruption issue in SwiftShader that's reachable from WebGL, resulting from an integer overflow issue. In the GPU process there is validation on the sizes passed to texture creation functions to...

Apache httpd -- multiple vulnerabilities

The Apache project reports: DoS for HTTP/2 connections by crafted requests CVE-2018-1333. By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. low modmd, DoS via Coredumps on specially crafted...

PNGwriter Denial of Service Vulnerability

PNGwriter is a C++ library for creating PNG images. A security vulnerability exists in the 'pngwriter::readfromfile' function in the pngwriter.cc file in PNGwriter version 0.7.0. An attacker can exploit this vulnerability to cause a denial of service segmentation error...

libwav Denial of Service Vulnerability (CNVD-2018-17202)

libwav is a wav encoding library written in C language. A security vulnerability exists in the 'wavfree' function of the libwav.c file in libwav 2017-04-20 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service segmentation error...

CentOS 6 : firefox (CESA-2018:2112)

An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Security update for exiv2 (moderate)

This update for exiv2 to 0.26 fixes the following security issues: - CVE-2017-14864: Prevent invalid memory address dereference in Exiv2::getULong that could have caused a segmentation fault and application crash, which leads to denial of service bsc1060995. - CVE-2017-14862: Prevent invalid memo...

CVE-2018-14049

An issue has been found in libwav through 2017-04-20. It is a SEGV in the function printinfo in wavinfo/wavinfo.c...

CVE-2018-14052

An issue has been found in libwav through 2017-04-20. It is a SEGV in the function applygain in wavgain/wavgain.c...

ALPINE-CVE-2018-14048

An issue has been found in libpng 1.6.34. It is a SEGV in the function pngfreedata in png.c, related to the recommended error handling for pngreadimage...

UBUNTU-CVE-2018-14048

An issue has been found in libpng 1.6.34. It is a SEGV in the function pngfreedata in png.c, related to the recommended error handling for pngreadimage...

Chrome V8 KeyAccumulator Bug Exploit

Chrome V8 suffers from a bug in KeyAccumulator that can cause a crash. Chrome: V8: A bug with KeyAccumulator PoC: for let i = 0; i https://cs.chromium.org/chromium/src/v8/src/objects.cc?rcl=a2ca1996873f3ffa79d9495fb2cf4e7c0e51d9e9&l=18369. The new table is directly used as the backing store of th...

PT-2018-12301 · Pngwriter · Pngwriter

Name of the Vulnerable Software and Affected Versions: PNGwriter version 0.7.0 Description: The issue is related to a SEGV in pngwriter::readfromfile in pngwriter.cc. It is noted that PNGwriter was never designed for reading untrusted files, and users are warned not to use it in sensitive...

CVE-2018-13997

Genann through 2018-07-08 has a SEGV in genannrun in genann.c...

CentOS 7 : firefox (CESA-2018:2113)

An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Awk to Perl 1.007-5 - Buffer Overflow (PoC)

Awk to Perl 1.007-5 - Buffer Overflow PoC Exploit Title: Awk to Perl 1.007-5 - Buffer Overflow PoC Author: Todor Donev Date: 2018-07-11 Software: Linux Awk to Perl Translator '/usr/bin/a2p' Version: 1.007-5 CVE: N/A Tested on: CentOS 6.9, Ubuntu 10 todor@adamantium $ python -c "print 'A' 2070" |...