PT-2019-4211

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3.9 Description The issue is related to a memory leak in the fastrpc dma buf attach function, which can cause a denial of service due to memory consumption. This can be triggered by causing dma get sgtable...

PT-2019-6239

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description A Denial of Service issue exists due to a memory leak in the url open dyn buf internal function in libavformat/aviobuf.c. This allows a remote attacker to cause a denial of service. The vulnerability is related t...

PT-2019-16193

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a possible out-of-bound write in the nfa rw store ndef rx buf function of nfa rw act.cc due to a missing bounds check. This could lead to local escalation of privilege with no...

PT-2018-9526

Name of the Vulnerable Software and Affected Versions zephyr-rtos version 1.12.0 Description The issue is related to a NULL base pointer reference in the sys ring buf put and sys ring buf get functions, which can cause a CPU Page Fault with error code 0x00000010. This can be exploited through a...

PT-2018-3904 · D Link · D-Link Dir-620

Name of the Vulnerable Software and Affected Versions: D-Link DIR-620 versions 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22 Description: The issue is related to incorrect processing of the res buf parameter to "index.cgi", allowing OS command injection. This can be exploited by a remote...

PT-2018-10052

Name of the Vulnerable Software and Affected Versions Long Range Zip aka lrzip version 0.631 Description The issue is related to a use-after-free in the lzma decompress buf function of stream.c, allowing remote attackers to cause a denial of service, such as an application crash, or possibly have...

PT-2018-5742

Name of the Vulnerable Software and Affected Versions: Qualcomm Android for MSM versions prior to security patch level 2018-04-05 Firefox OS for MSM versions prior to security patch level 2018-04-05 QRD Android versions prior to security patch level 2018-04-05 Description: The issue arises from t...

PT-2018-6572

Name of the Vulnerable Software and Affected Versions: Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description: The issue is related to an array out of bounds condition in the msm isp prepare v4l2 b...

PT-2018-6567

Name of the Vulnerable Software and Affected Versions: Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description: The issue arises from the improper validation of multiple values received from firmware in the wma get ll stats ext buf...

CVE-2018-6948: Improper Restriction of Operations within the Bounds of a Memory Buffer

In CCN-lite 2, the function ccnlprefixtostrdetailed can cause a buffer overflow, when writing a prefix to the buffer buf. The maximal size of the prefix is CCNLMAXPREFIXSIZE; the buffer has the size CCNLMAXPREFIXSIZE. However, when NFN is enabled, additional characters are written to the buffer...

PT-2018-17835

Name of the Vulnerable Software and Affected Versions CCN-lite version 2 Description The issue arises in the ccnl prefix to str detailed function, which can cause a buffer overflow when writing a prefix to the buffer buf. The buffer size is defined as CCNL MAX PREFIX SIZE, but when NFN is enabled...

PT-2017-3613

Name of the Vulnerable Software and Affected Versions: Android versions affected versions not specified Description: The issue is related to improper input validation for p2p noa info in the wma send bcn buf ll function, which can lead to a potential buffer overflow. This is due to insufficient...

PT-2017-10962

Name of the Vulnerable Software and Affected Versions rust-base64 versions = 0.5.1 Description The issue arises from an integer overflow bug when calculating the size of a buffer for base64 encoding using the encode config buf and encode config functions. If the input string is large, a buffer th...

PT-2017-18291

Name of the Vulnerable Software and Affected Versions rzip version 2.1 Description The issue is related to a heap-based buffer overflow in the read buf function, located in stream.c, which can be triggered by a crafted archive. This can cause a denial of service, resulting in an application crash...

DEBIAN-CVE-2017-6058

Buffer overflow in NetRxPkt::ehdrbuf in hw/net/netrxpkt.c in QEMU aka Quick Emulator, when the VLANSTRIP feature is enabled on the vmxnet3 device, allows remote attackers to cause a denial of service out-of-bounds access and QEMU process crash via vectors related to VLAN stripping...

Android Qualcomm Component Denial of Service Vulnerability (CNVD-2016-06205)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. A security vulnerability exists in the rivers/media/video/msm/msmmctlbuf.c file in the Qualcomm...

PT-2020-7821

Name of the Vulnerable Software and Affected Versions: Tor versions 0.2.4.x through 0.2.4.25 Tor versions 0.2.5.x through 0.2.5.10 Description: The issue is related to the buf pullup function in Tor, which does not properly handle unexpected arrival times of buffers with invalid layouts. This...

PT-2015-3672 · D Link · D-Link Dap-1360

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1360 router versions 2.5.4 and later Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the res buf parameter to "index.cgi" when res config id is set to 41. This could...

PT-2014-5605

Name of the Vulnerable Software and Affected Versions Ruby versions 1.9.3, 2.0.0, and 2.1 Description The issue allows context-dependent attackers to cause a denial of service, resulting in a segmentation fault and crash, by utilizing a long string in the str buf cat function. Recommendations For...

PT-2014-5486 · D Link · D-Link Dap 1150

Name of the Vulnerable Software and Affected Versions: D-Link DAP 1150 version 1.2.94 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the res buf parameter to "index.cgi" in the Control/URL-filter section. Recommendations: For D-Lin...