108 matches found
CVE-2019-14087
Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8909W, QCS605...
CVE-2019-14087
The CVE-2019-14087 entry affects Qualcomm display components in Snapdragon MSM8909W and QCS605. Root cause: a buffer management failure when accessing the HDR blit handle if the device’s display does not support certain color modes. Impact: local attacker could potentially exploit this with low c...
The vulnerability of the vrend_blit_need_swizzle function (vrend_renderer.c) in the virglrenderer library, which allows a hacker to trigger a service failure.
The vulnerability of the vrendblitneedswizzle function in the virglrenderer library is related to reading beyond the buffer boundary in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure using the VIRGLCCMDBLIT command...
SDL: heap-based buffer overflow in SDL blit functions in video/SDL_blit*.c
A heap-based buffer overflow was discovered in SDL in the SDLBlitCopy function, that was called while copying an existing surface into a new optimized one, due to lack of validation while loading a BMP image in the SDLLoadBMPRW function. An application that uses SDL to parse untrusted input files...
ALPINE-CVE-2019-18390
An out-of-bounds read in the vrendblitneedswizzle function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGLCCMDBLIT commands...
DEBIAN-CVE-2019-18390
An out-of-bounds read in the vrendblitneedswizzle function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGLCCMDBLIT commands...
UBUNTU-CVE-2019-18390
An out-of-bounds read in the vrendblitneedswizzle function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGLCCMDBLIT commands...
SDL: heap-based buffer overflow in SDL blit functions in video/SDL_blit*.c
A heap-based buffer overflow was discovered in SDL in the SDLBlitCopy function, that was called while copying an existing surface into a new optimized one, due to lack of validation while loading a BMP image in the SDLLoadBMPRW function. An application that uses SDL to parse untrusted input files...
SDL: heap-based buffer overflow in SDL blit functions in video/SDL_blit*.c
A heap-based buffer overflow was discovered in SDL in the SDLBlitCopy function, that was called while copying an existing surface into a new optimized one, due to lack of validation while loading a BMP image in the SDLLoadBMPRW function. An application that uses SDL to parse untrusted input files...
UBUNTU-CVE-2019-13616
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDLblitN.c when called from SDLSoftBlit in video/SDLblit.c...
Simple DirectMedia Layer Buffer Overflow Vulnerability (CNVD-2019-23072)
Simple DirectMedia Layer SDL is a multi-platform library for accessing low-level hardware and graphics and providing support for games, software and emulators. A buffer overflow vulnerability exists in the BlitNtoN file in video/SDLblitN.c in SDL versions 1.2.15 and earlier and versions 2.x throu...
ALPINE-CVE-2019-13616
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDLblitN.c when called from SDLSoftBlit in video/SDLblit.c...
DEBIAN-CVE-2019-10872
An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc...
UBUNTU-CVE-2019-10872
An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc...
DEBIAN-CVE-2019-7635
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDLblit1.c...
Arbitrary Code Execution
QEMU is vulnerable to arbitray code execution. A local guest user is able to write arbitrary data outside of VRAM-allocated buffer boundaries in the host's application address space due to insufficient checks in the Cirrus blit region, leading to execution of arbitrary code...
skia/image_filter_deserialize: Use-of-uninitialized-value in sse2::blit_row_s32a_opaque
Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5003922642042880 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...
skia/image_filter_deserialize: Use-of-uninitialized-value in sse2::blit_row_s32a_opaque
Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=4641263824404480 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...
Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy
The cirrusdocopy function in hw/display/cirrusvga.c in QEMU aka Quick Emulator, when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service divide-by-zero error and QEMU process crash via vectors involving blit pitch values...
Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy
The cirrusdocopy function in hw/display/cirrusvga.c in QEMU aka Quick Emulator, when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service divide-by-zero error and QEMU process crash via vectors involving blit pitch values...