2962 matches found
CVE-2018-16132
The image rendering component createGenericPreview of the Open Whisper Signal app through 2.29.0 for iOS fails to check for unreasonably large images before manipulating received images. This allows for a large image sent to a user to exhaust all available memory when the image is displayed,...
CVE-2018-16132
The image rendering component createGenericPreview of the Open Whisper Signal app through 2.29.0 for iOS fails to check for unreasonably large images before manipulating received images. This allows for a large image sent to a user to exhaust all available memory when the image is displayed,...
CVE-2018-16132
The CVE describes an issue in the Open Whisper Signal app (iOS) up to version 2.29.0 where the image rendering component createGenericPreview does not validate excessively large inputs before processing them. This can allow a large image sent to a user to exhaust available memory when displayed, ...
SD-WAN 210 LTE - SIM Card State : Present but Service State : Unknown
SIM card is recognize by the SD-WAN Modem, including correct provider and APN. But the SD-WAN can not get the LTE service, it has the following state: Home Network | Card State : Present Home Network | Home Network : Unknown Home Network | Service State : Unknown Home Network | Roaming Status :...
comms/hylafax -- Malformed fax sender remote code execution in JPEG support
A malicious sender that sets both JPEG and MH,MR,MMR or JBIG in the same DCS signal or sends a large JPEG page could lead to remote code execution...
Federal Aviation Administration GPS Testing
Overview The US Federal Aviation Administration FAA has issued two flight advisories identifying planned Global Positioning System GPS temporary outages and the affected areas, due Department of Defense testing. During testing, the GPS signal may be unreliable or unavailable. ICS-CERT is issuing...
Open Whisper Signal Information Disclosure Vulnerability
Open Whisper Signal aka Signal-Desktop is a live chat application with encryption. An information disclosure vulnerability exists in versions prior to Open Whisper Signal 1.15.0-beta.10. An attacker can exploit the vulnerability to recover expired messages...
Open redirect
Open Whisper Signal aka Signal-Desktop before 1.15.0-beta.10 allows information leakage...
CVE-2018-14023
Open Whisper Signal aka Signal-Desktop before 1.15.0-beta.10 allows information leakage...
CVE-2018-14023
Open Whisper Signal aka Signal-Desktop before 1.15.0-beta.10 allows information leakage...
CVE-2018-14023
Open Whisper Signal aka Signal-Desktop before 1.15.0-beta.10 allows information leakage...
CVE-2018-14023
CVE-2018-14023 affects Open Whisper Signal (Signal-Desktop). Multiple sources describe an information-disclosure vulnerability that exists in versions prior to 1.15.0-beta.10, allowing an attacker to recover expired messages. The CNVD entry explicitly states “Open Whisper Signal Information Discl...
Black Hat 2018: Mixed Signal Microcontrollers Open to Side-Channel Attacks
LAS VEGAS – Mixed signal circuits – in which chips isolate digital and analog components – are opening chips up to novel side-channel attacks, researchers said at Black Hat 2018 today. As chip manufacturers search for smaller and cheaper microelectronics components, they have adopted a mixed-sign...
Tamper proofing review: the iZettle card payment terminal
Tamper resistance is an increasingly important factor in smart devices. Together with secure hardware design and defensive coding, it can deliver a very secure device. One of the most common areas the average consumer will encounter tamper resistant devices is in payment terminals, or Pin Entry...
graphicsmagick/coder_MVG_fuzzer: Unknown signal in MagickRealloc
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5633943205314560 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...
graphicsmagick/coder_MVG_fuzzer: Unknown signal in DrawImage
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5634036016873472 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...
Code injection
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubiosourceavcodecreadframe in io/sourceavcodec.c, as demonstrated by aubiomfcc...
CVE-2018-14521
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubiosourceavcodecreadframe in io/sourceavcodec.c, as demonstrated by aubiomfcc...