CVE-2019-3572

CVE-2019-3572 affects libming 0.4.8, with a heap-based buffer over-read in the function writePNG (util/dbl2png.c) of the dbl2png utility. The issue is linked to an erroneous call to libpng's png_write_row, potentially enabling an out-of-bounds write on certain memory layouts. No exploitation deta...

CVE-2019-3572

An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call to pngwriterow in libpng, an out-of-bounds write might occur for some memory...

CVE-2019-3574

In libsixel v1.8.2, there is a heap-based buffer over-read in the function loadjpeg in the file loader.c, as demonstrated by img2sixel...

CVE-2019-3574

CVE-2019-3574 : In libsixel v1.8.2, there is a heap-based buffer over-read in load_jpeg() (loader.c), demonstrated by img2sixel. Connected sources consistently indicate upgrades to newer libsixel versions to mitigate issues (e.g., 1.8.3+; some entries mention 1.8.4+ as a fixed release). Evidence ...

CVE-2019-3574

In libsixel v1.8.2, there is a heap-based buffer over-read in the function loadjpeg in the file loader.c, as demonstrated by img2sixel...

SUSE SLES12 Security Update : php7 (SUSE-SU-2017:2468-1)

This update for php7 fixes several issues. These security issues were fixed : - CVE-2017-12932: Prevent heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue could have...

SUSE SLED15 / SLES15 Security Update : clamav (SUSE-SU-2018:2230-1)

This update for clamav to version 0.100.1 fixes the following issues: The following security vulnerabilities were addressed : - CVE-2018-0360: HWP integer overflow, infinite loop vulnerability bsc1101410 - CVE-2018-0361: PDF object length check, unreasonably long time to parse relatively small fi...

SUSE SLED15 / SLES15 Security Update : tcpdump (SUSE-SU-2018:4131-1)

This update for tcpdump fixes the following issues : Security issues fixed : CVE-2018-19519: Fixed a stack-based buffer over-read in the printprefix function bsc1117267 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenab...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:2043-1)

This update for ImageMagick fixes the following issues: The following security vulnerabilities were fixed : - CVE-2018-11625: Fixed heap-based buffer over-read in SetGrayscaleImage in the quantize.c file, which allowed remote attackers to cause buffer over-read via a crafted file. bsc1096200 -...

SUSE SLES12 Security Update : php5 (SUSE-SU-2017:2518-1)

This update for php5 fixes on issues. This security issue was fixed : - CVE-2017-12933: The finishnesteddata function in ext/standard/varunserializer.re was prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue could have had an unspecified impact on the...

Heap overflow

ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the okmodecode2 function in okmo.c...

CVE-2018-20618

ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the okmodecode2 function in okmo.c...

CVE-2018-20618

CVE-2018-20618 affects ok-file-formats up to 2018-10-16, with a heap-based buffer over-read in the ok_mo_decode2 function (ok_mo.c). Multiple connected sources confirm the vulnerability and scope, noting versions prior to 2018-10-16 are affected. Public documentation provided does not specify a f...

CVE-2018-20591

A heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of libming v0.4.8. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by swftocxx...

Heap overflow

A heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of libming v0.4.8. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by swftocxx...

CVE-2018-20591

A heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of libming v0.4.8. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by swftocxx...

CVE-2018-20591

A vulnerability in libming v0.4.8: a heap-based buffer over-read in the decompileJUMP function (util/decompile.c) can cause segmentation faults and denial-of-service. The issue is demonstrated by swftocxx. Connected sources consistently describe a heap-based over-read in libming v0.4.8; no patch/...

CVE-2018-20588

lib/support/unicodeconv/unicodeconv.c in libotfcc.a in otfcc v0.10.3-alpha has a buffer over-read...

CVE-2018-20588

lib/support/unicodeconv/unicodeconv.c in libotfcc.a in otfcc v0.10.3-alpha has a buffer over-read...

CVE-2018-20588

The CVE-2018-20588 issue is in otfcc v0.10.3-alpha (libotfcc.a), specifically the file lib/support/unicodeconv/unicodeconv.c, where a buffer over-read/overflow exists in the Unicode conversion routine. CNVD-2019-03337 and OSV entries describe a buffer overflow vulnerability in this component, wit...