CVE-2024-33071 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0...

CVE-2024-33070 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing ESP IE from beacon/probe response frame...

CVE-2024-33070 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing ESP IE from beacon/probe response frame...

CVE-2024-33064 Buffer Over-read in WLAN Host Communication

Information disclosure while parsing the multiple MBSSID IEs from the beacon...

CVE-2024-33049 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame...

CVE-2024-33049 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame...

K000141355: Multiple PHP vulnerabilities

Security Advisory Description CVE-2016-4342 ext/phar/pharobject.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles zero-length uncompressed data, which allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact v...

SUSE-SU-2024:3526-1 Security update for Mesa

This update for Mesa fixes the following issues: - CVE-2023-45919: Fixed buffer over-read in glXQueryServerString bsc1222041. - CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId bsc1222040. - CVE-2023-45922: Fixed segmentation violation in glXGetDrawableAttribut...

PUB-A-310937217

In gscgsarescue of gscgsa.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-344620633

Bulletin has no description...

CVE-2024-9029

A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the readiptcprofile function in the Source/Metadata/IPTC.cpp file because the size of the profile is not being sanitized, causing a crash in the application linked to the library,...

CVE-2024-9029

A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the readiptcprofile function in the Source/Metadata/IPTC.cpp file because the size of the profile is not being sanitized, causing a crash in the application linked to the library,...

CVE-2024-9029

CVE-2024-9029 affects the freeimage library. A crafted image can cause a buffer over-read of 1 byte in the function read_iptc_profile (Source/Metadata/IPTC.cpp) because the profile size is not sanitized, leading to a denial of service. The impact is a crash of the application linked to the librar...

CVE-2024-9029 Freeimage: heap buffer overflow in tiff_read_iptc_profile

A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the readiptcprofile function in the Source/Metadata/IPTC.cpp file because the size of the profile is not being sanitized, causing a crash in the application linked to the library,...

PT-2024-39373 · Unknown +1 · Freeimage Library +1

Name of the Vulnerable Software and Affected Versions: freeimage library affected versions not specified Description: A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the read iptc profile function in the Source/Metadata/IPTC.cpp file...

file: Stack Buffer Overread

Background The file utility attempts to identify a file’s format by scanning binary data for patterns. Description Multiple vulnerabilities have been discovered in file. Please review the CVE identifiers referenced below for details. Impact File has an stack-based buffer over-read in filecopystr ...

K000141088: SQLite vulnerability CVE-2017-10989

Security Advisory Description The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact. CVE-2017-10989 Impact...

CBL Mariner 2.0 Security Update: libxml2 (CVE-2024-34459)

The version of libxml2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-34459 advisory. - An issue was discovered in xmllint from libxml2 before 2.11.8 and 2.12.x before 2.12.7. Formatting error...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2024-2399)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : libxml2 (EulerOS-SA-2024-2399)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in xmllint from libxml2 before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can resu...