CVE-2019-2039

In rwi93smdetectndef of rwi93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1...

CVE-2019-2038

CVE-2019-2038 corresponds to an Android vulnerability in rw_i93_process_sys_info (rw_i93.cc) where a missing bounds check allows an out-of-bounds read. The impact is local information disclosure without extra execution privileges, with exploitation requiring user interaction. Affected Android ver...

CVE-2019-2035

The CVE-2019-2035 issue affects Android and is caused by a missing bounds check in rw_i93_sm_update_ndef within rw_i93.cc, leading to an out-of-bounds write. The described impact is local elevation of privilege with user interaction required for exploitation, on Android versions 7.0–9 (Android ID...

CVE-2019-2035

In rwi93smupdatendef of rwi93.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1...

CVE-2019-2031

In rwt3tacthandlecheckndefrsp of rwt3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7....

CVE-2019-2031

CVE-2019-2031 affects Android if-present in rw_t3t_act_handle_check_ndef_rsp inside rw_t3t.cc. The issue is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with no additional execution privileges or user interaction required. Affected versions inclu...

OPENSUSE-SU-2019:1198-1 Security update for bluez

This update for bluez fixes the following issues: Security issue fixed: - CVE-2016-9918: Fixed a out-of-bound read in the packethexdump function bsc1015173 This update was imported from the SUSE:SLE-15:Update update project...

Security update for bluez (moderate)

openSUSE Security Update: Security update for bluez Announcement ID: openSUSE-SU-2019:1198-1 Rating: moderate References: 1015173 Cross-References: CVE-2016-9918 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for bluez fixes...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4600)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4600 advisory. - can: gw: ensure DLC boundaries after CAN frame modification Oliver Hartkopp Orabug: 29215300 CVE-2019-3701 CVE-2019-3701 - ext4: verify the depth...

CVE-2019-9133

When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't check object size correctly, which leads to integer underflow then to memory out-of-bound read/write. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file...

Integer overflow

When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't check object size correctly, which leads to integer underflow then to memory out-of-bound read/write. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file...

CVE-2019-9133 KMPlayer Subtitles parser Heap Overflow Vulnerability

When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't check object size correctly, which leads to integer underflow then to memory out-of-bound read/write. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file...

openSUSE Security Update : ldb (openSUSE-2019-1163)

This update for ldb fixes the following issue : Security issue fixed : - CVE-2019-3824: Fixed an out-of-bound read vulnerability in ldbwildcardcompare bsc1125410. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE: Security Advisory for ldb (openSUSE-SU-2019:1163-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1163-1 Security update for ldb

This update for ldb fixes the following issue: Security issue fixed: - CVE-2019-3824: Fixed an out-of-bound read vulnerability in ldbwildcardcompare bsc1125410. This update was imported from the SUSE:SLE-15:Update update project...

CVE-2019-1789

ClamAV versions prior to 0.101.2 are susceptible to a denial of service DoS vulnerability. An out-of-bounds heap read condition may occur when scanning PE files. An example is Windows EXE and DLL files that have been packed using Aspack as a result of inadequate bound-checking...

SUSE-SU-2019:0841-1 Security update for bluez

This update for bluez fixes the following issues: Security issue fixed: - CVE-2016-9918: Fixed a out-of-bound read in the packethexdump function bsc1015173...

openSUSE Security Update : libgit2 (openSUSE-2019-638)

This update for libgit2 to version 0.26.5 fixes the following issues : The following security vulnerabilities were addressed : - CVE-2018-10887: Fixed an integer overflow which in turn leads to an out of bound read, allowing to read the base object, which could be exploited by an attacker to caus...

SUSE-SU-2019:0639-1 Security update for ldb

This update for ldb fixes the following issue: Security issue fixed: - CVE-2019-3824: Fixed an out-of-bound read vulnerability in ldbwildcardcompare bsc1125410...

CVE-2018-12222

Insufficient input validation in Kernel Mode Driver in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 potentially enables an unprivileged user to cause ...