ImageMagick out-of-bounds write vulnerability (CNVD-2018-12317)

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. An out-of-bounds write vulnerability exists in ReadBMPImage and WriteBMPImage in coders/bmp.c in ImageMagick 7.0.8-3 Q16. An attacker can cause an out-of-bounds write ...

Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3485-2)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3485-2 advisory. USN-3485-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enableme...

The vulnerability of the syntax analysis procedure for X509 certificates in the MatrixSSL cryptographic library allows a perpetrator to execute arbitrary code.

The vulnerability of the syntax analysis procedure for X509 certificates in the MatrixSSL cryptographic library arises from the execution of an operation outside the buffer boundaries in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a...

Out-of-bounds

In all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by-one error in a camera driver, an out-of-bounds read/write can occur...

CVE-2017-12597

OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread...

PT-2017-4338

Name of the Vulnerable Software and Affected Versions: OpenCV versions through 3.3 Description: The issue is related to an out-of-bounds read error in the icvCvt BGRA2BGR 8u C4C3R function when reading an image file using cv::imread. This error can allow a remote attacker to access confidential...

tcpdump: multiple overflow issues in protocol decoding

Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode without -w which...

OPENSUSE-SU-2017:1268-1 Security update for MozillaThunderbird

This update to MozillaThunderbird 51.1.0 fixes security issues and bugs. In general, these flaws cannot be exploited through email because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts. The following vulnerabilities were fixed: boo1035082,...

Adobe Acrobat and Reader Information Disclosure (APSB17-11: CVE-2017-3046)

An information disclosure vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to out-of-bounds error while accessing unintended memory. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted PDF file...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerability of programs for viewing and editing PDF files arises from the execution of an operation outside the buffer in memory, as a result of parsing TIFF files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Adobe Acrobat and Reader Information Disclosure (APSB17-11: CVE-2017-3031)

An information disclosure vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to out-of-bounds error while accessing unintended memory in a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted PDF...

Adobe Acrobat and Reader Information Disclosure (APSB17-11: CVE-2017-3021)

An information disclosure vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to out-of-bounds error while accessing unintended memory in a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted PDF...

Adobe Acrobat and Reader Information Disclosure (APSB17-11: CVE-2017-3022)

An information disclosure vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to out-of-bounds error while accessing to unintended memory in a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted...

Adobe Acrobat and Reader Memory Corruption (APSB17-01: CVE-2017-2941)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to out-of-bounds error while accessing to unintended memory in a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted PDF fi...

UBUNTU-CVE-2016-4331

When decoding data out of a dataset encoded with the H5ZNBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to arbitrary code execution...

Adobe Acrobat and Reader Memory Corruption (APSB16-33: CVE-2016-6970)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to out-of-bounds error while accessing to unintended memory in a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted PDF fi...

Adobe Acrobat and Reader Memory Corruption (APSB16-33: CVE-2016-6948)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to out-of-bounds error while accessing to unintended memory in a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted PDF fi...

Adobe Acrobat and Reader Memory Corruption (APSB16-33: CVE-2016-6941)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to out-of-bounds error while accessing to unintended memory in a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted PDF fi...

Adobe Acrobat and Reader Memory Corruption (APSB16-33: CVE-2016-6947)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to out-of-bounds error while accessing to unintended memory in a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted PDF fi...

Adobe Acrobat and Reader Memory Corruption (APSB16-14: CVE-2016-1084)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to out-of-bounds error while accessing to unintended memory in a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted PDF fi...