Mozilla: Heap buffer overflow in WebGL

The Mozilla Foundation Security Advisory describes this flaw as: Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers...

PT-2020-16584

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 84 Thunderbird versions prior to 78.6 Firefox ESR versions prior to 78.6 Description The issue arises from certain blit values provided by the user not being properly constrained, leading to a heap buffer overflow on...

UBUNTU-CVE-2020-26971

Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers. This vulnerability affects Firefox 84, Thunderbird 78.6, and Firefox ESR 78.6...

SDL: heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDLblit1.c...

SDL: heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDLblit1.c...

CVE-2019-14087

Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8909W, QCS605...

Design/Logic Flaw

Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8909W, QCS605...

CVE-2019-14087

The CVE-2019-14087 entry affects Qualcomm display components in Snapdragon MSM8909W and QCS605. Root cause: a buffer management failure when accessing the HDR blit handle if the device’s display does not support certain color modes. Impact: local attacker could potentially exploit this with low c...

CVE-2019-14087

Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8909W, QCS605...

PT-2020-9509

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to a failure in buffer management while accessing a handle for HDR blit when color modes are not supported by the display. This affects Snapdragon...

The vulnerability of the vrend_blit_need_swizzle function (vrend_renderer.c) in the virglrenderer library, which allows a hacker to trigger a service failure.

The vulnerability of the vrendblitneedswizzle function in the virglrenderer library is related to reading beyond the buffer boundary in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure using the VIRGLCCMDBLIT command...

SDL: heap-based buffer overflow in SDL blit functions in video/SDL_blit*.c

A heap-based buffer overflow was discovered in SDL in the SDLBlitCopy function, that was called while copying an existing surface into a new optimized one, due to lack of validation while loading a BMP image in the SDLLoadBMPRW function. An application that uses SDL to parse untrusted input files...

ALPINE-CVE-2019-18390

An out-of-bounds read in the vrendblitneedswizzle function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGLCCMDBLIT commands...

DEBIAN-CVE-2019-18390

An out-of-bounds read in the vrendblitneedswizzle function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGLCCMDBLIT commands...

UBUNTU-CVE-2019-18390

An out-of-bounds read in the vrendblitneedswizzle function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGLCCMDBLIT commands...

SDL: heap-based buffer overflow in SDL blit functions in video/SDL_blit*.c

A heap-based buffer overflow was discovered in SDL in the SDLBlitCopy function, that was called while copying an existing surface into a new optimized one, due to lack of validation while loading a BMP image in the SDLLoadBMPRW function. An application that uses SDL to parse untrusted input files...

SDL: heap-based buffer overflow in SDL blit functions in video/SDL_blit*.c

A heap-based buffer overflow was discovered in SDL in the SDLBlitCopy function, that was called while copying an existing surface into a new optimized one, due to lack of validation while loading a BMP image in the SDLLoadBMPRW function. An application that uses SDL to parse untrusted input files...

UBUNTU-CVE-2019-13616

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDLblitN.c when called from SDLSoftBlit in video/SDLblit.c...

PT-2019-4527

Name of the Vulnerable Software and Affected Versions virglrenderer versions 0.8.0 and earlier Description The issue is related to an out-of-bounds read in the vrend blit need swizzle function in vrend renderer.c in virglrenderer. This can be exploited by guest OS users to cause a denial of servi...

Simple DirectMedia Layer Buffer Overflow Vulnerability (CNVD-2019-23072)

Simple DirectMedia Layer SDL is a multi-platform library for accessing low-level hardware and graphics and providing support for games, software and emulators. A buffer overflow vulnerability exists in the BlitNtoN file in video/SDLblitN.c in SDL versions 1.2.15 and earlier and versions 2.x throu...