UBUNTU-CVE-2019-13618

In GPAC before 0.8.0, isomedia/isomread.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gfm2tssync in mediatools/mpegts.c...

CVE-2019-13618

GPAC 0.x before 0.8.0 is affected by CVE-2019-13618 due to a heap-based buffer over-read in isomedia/isom_read.c of the libgpac.a library, demonstrated by a crash in gf_m2ts_sync (media_tools/mpegts.c). This can cause a denial of service via crash. The connected sources indicate the vulnerability...

CVE-2019-13618

Removed by vendor...

CVE-2019-13617

CVE-2019-13617 affects njs up to 0.3.3 used in NGINX. The vulnerability is a heap-based buffer over-read in nxt_vsprintf (nxt/nxt_sprintf.c) during error handling, demonstrated by an njs_regexp_literal path that triggers njs_parser_lexer_error and then njs_parser_scope_error. Impact described as ...

CVE-2019-13615

libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based buffer over-read in EbmlElement::FindNextElement...

CVE-2019-13615

libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based buffer over-read in EbmlElement::FindNextElement...

CVE-2019-13615

CVE-2019-13615 affects VideoLAN VLC Media Player through libebml < 1.3.6 in the MKV demux module (used by VLC binaries

CVE-2019-13303

A heap-based buffer over-read was discovered in ImageMagick in the way it composes images. Applications compiled against ImageMagick libraries that accept untrustworthy images may be vulnerable to this flaw. An attacker could abuse this flaw by providing a specially crafted image to make the...

CVE-2019-13615

libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based buffer over-read in EbmlElement::FindNextElement...

CVE-2019-13616

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDLblitN.c when called from SDLSoftBlit in video/SDLblit.c...

ImageMagick <= 7.0.8-50 Multiple Vulnerabilities - Windows

ImageMagick is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ImageMagick <= 7.0.8-50 Multiple Vulnerabilities - Linux

ImageMagick is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Heap overflow

mqparsehttp in mongoose.c in Mongoose 6.15 has a heap-based buffer over-read...

CVE-2019-13503

mqparsehttp in mongoose.c in Mongoose 6.15 has a heap-based buffer over-read...

CVE-2019-13503

Technical details about CVE-2019-13503 are not present in the connected documents. The initial description notes a heap-based buffer over-read in Mongoose 6.15. Monitor for updates and consult official CVE records for specifics.

EulerOS Virtualization for ARM 64 3.0.2.0 : sqlite (EulerOS-SA-2019-1713)

According to the version of the sqlite package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2019:1773-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-11597: Fixed a heap-based buffer over-read in the WriteTIFFImage bsc1138464. Fixed a file content disclosure via SVG and WMF decoding bsc1138425. Note that Tenable Network Security has extracted the precedin...

EulerOS Virtualization for ARM 64 3.0.2.0 : curl (EulerOS-SA-2019-1697)

According to the version of the curl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The ourWriteOut function in toolwriteout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive...

EulerOS Virtualization for ARM 64 3.0.2.0 : curl (EulerOS-SA-2019-1695)

According to the version of the curl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the toolmsgs.c:voutf function that m...

SUSE-SU-2019:1773-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-11597: Fixed a heap-based buffer over-read in the WriteTIFFImage bsc1138464. - Fixed a file content disclosure via SVG and WMF decoding bsc1138425...