CVE-2018-9557

In reallyinstallpackage of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0...

DEBIAN-CVE-2018-19857

The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a ReadKukiChunk cast converts a return value to an unsigned int even if that value is negative. This could result in a denial...

Remote Code Execution (RCE)

Microsoft ChakraCore is vulnerable to remote code execution. This is due to uninitialized memory of SpreadArgs in InterpreterStackFrame.cpp which would allow a remote attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2017-0010,...

UBUNTU-CVE-2018-19857

The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a ReadKukiChunk cast converts a return value to an unsigned int even if that value is negative. This could result in a denial...

DEBIAN-CVE-2018-19854

An issue was discovered in the Linux kernel before 4.19.3. cryptoreportone and related functions in crypto/cryptouser.c the crypto user configuration API do not fully initialize structures that are copied to userspace, potentially leaking sensitive memory to user programs. NOTE: this is a...

CVE-2018-6982

VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may lead to an information leak from host to guest...

Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Integration Bus & IBM App Connect Enterprise V11

Summary IBM Integration Bus & IBM App connect Enterprise V11 ship with Node.js version 8 for which multiple vulnerabilities were reported and have been addressed. Vulnerability details are listed below. Vulnerability Details CVEID: CVE-2018-0737 Description: OpenSSL could allow a local attacker t...

Apple macOS Mojave Intel Graphics Driver Uninitialized Memory Information Disclosure Vulnerability

Apple macOS Mojave is a dedicated operating system developed by Apple for Mac computers.Intel Graphics Driver is one of the integrated graphics drivers. A security vulnerability exists in the Intel Graphics Driver component of Apple macOS Mojave versions prior to 10.14, which arises from a failur...

Apple macOS IntelFBClientControl doAtribute Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handlin...

kernel: vhost: Information disclosure in vhost/vhost.c:vhost_new_msg()

The Linux kernel does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhostnewmsg function. This can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file...

kernel: vhost: Information disclosure in vhost/vhost.c:vhost_new_msg()

The Linux kernel does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhostnewmsg function. This can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file...

Apple macOS AppleGPUWrangler Logging Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handlin...

Google Android Buffer Overflow Vulnerability (CNVD-2018-19564)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in Android, which stems from the program writing uninitialized memory to flash memory when processing the 'writedeviceinfoflash' function. A...

Design/Logic Flaw

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, while processing the function for writing device values into flash, uninitialized memory can be written to flash...

CVE-2017-15844

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, while processing the function for writing device values into flash, uninitialized memory can be written to flash...

CVE-2017-15844

CVE-2017-15844 affects CAF Android builds using the Linux kernel. During processing of the function that writes device values into flash, uninitialized memory can be written to flash. This can lead to information disclosure (CONFIDENTIALITY impact) with a local attacker, no user interaction requi...

The vulnerability of the software for processing, transforming, and generating documents using Ghostscript arises from the use of uninitialized memory, allowing an attacker to execute arbitrary code.

The vulnerability of the software for processing, transforming, and generating Ghostscript documents arises from the use of uninitialized memory when manipulating the aesdecode operator in PostScript files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a...

Microsoft Windows Kernel Local Information Disclosure Vulnerability (CNVD-2018-26989)

Microsoft Windows Server 2016 and others are a series of operating systems released by Microsoft Corporation USA.Windows Kernel is one of the Windows system kernels. An information disclosure vulnerability exists in Microsoft Windows Kernel, which stems from a program's failure to properly...

CVE-2017-15418

Use of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

Design/Logic Flaw

Use of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...