CVE-2019-19949

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magickpngwriterawprofile and LocaleNCompare...

CVE-2019-19953

In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c...

Heap overflow

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magickpngwriterawprofile and LocaleNCompare...

Heap overflow

In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c...

CVE-2019-19953

In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c...

CVE-2019-19953

In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c...

CVE-2019-19953

GraphicsMagick 1.4 snapshot-20191208 Q8 is affected by CVE-2019-19953 due to a heap-based buffer over-read in EncodeImage (coders/pict.c). The issue is confirmed in multiple disclosures (Debian/Mageia advisories and Ubuntu/DSA/Nessus plugins) as part of a set of GraphicsMagick vulnerabilities, wi...

CVE-2019-19949

CVE-2019-19949 affects ImageMagick (7.0.8-43 Q16 and earlier). It is a heap-based buffer over-read in WritePNGImage (coders/png.c), related to Magick_png_write_raw_profile and LocaleNCompare. Impact: attacker-supplied PNGs may cause denial of service via a crash and may potentially disclose memor...

CVE-2019-19949

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magickpngwriterawprofile and LocaleNCompare...

CVE-2019-19949

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magickpngwriterawprofile and LocaleNCompare...

CVE-2018-10372

processcutuindex in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted binary file, as demonstrated by readelf...

Security Bulletin: Multiple Vulnerabilities in Nginx affects IBM Watson Studio Local

Summary Multiple Vulnerabilities in Nginx affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-13067 DESCRIPTION: njs through 0.3.3, used in NGINX, has a buffer over-read in nxtutf8decode in nxt/nxtutf8.c. This issue occurs after the fix for CVE-2019-12207 is in place. CVSS Base...

Security Bulletin: Multiple Vulnerabilities in GNU Binutils affects Watson Studio Local

Summary Multiple Vulnerabilities in GNU Binutils affects Watson Studio Local Vulnerability Details CVEID: CVE-2018-18701 DESCRIPTION: An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite...

Security Bulletin: A security vulnerability has been identified in Red Hat® Enterprise Linux (RHEL) Server shipped with PurePower Integrated Manager (PPIM)

Summary RHEL Server is shipped as a component of PPIM. Information about a security vulnerability affecting RHEL Server has been published in a Red Hat errata. Vulnerability Details CVEID: CVE-2018-16839 DESCRIPTION: Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SA...

Scientific Linux Security Update : freetype on SL6.x i386/x86_64 (20191217)

Security Fixes : - freetype: a heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c leading to information disclosure CVE-2015-9381 - freetype: mishandling psparserskipPStoken in an FTNewMemoryFace operation in skipcomment, psaux/psobjs.c, leads to a buffer over-read CVE-2015-9382 C...

EulerOS 2.0 SP3 : freetype (EulerOS-SA-2019-2581)

According to the versions of the freetype packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The parseencoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service infinite loop via a...

EulerOS 2.0 SP3 : exiv2 (EulerOS-SA-2019-2576)

According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service crash due to ...

EulerOS 2.0 SP3 : elfutils (EulerOS-SA-2019-2573)

According to the versions of the elfutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The libelfsetrawdatawrlock function in elfgetdata.c in elfutils before 0.168 allows remote attackers to cause a denial of service crash via a...

CVE-2019-10487

Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ800...

CVE-2019-10487

CVE-2019-10487 affects Qualcomm Snapdragon family components (e.g., Snapdragon Auto/Compute/IoT lineups) and is caused by a buffer over-read while parsing SMS OTA messages at the transport layer when the network provides unintended values. The issue spans a wide set of Qualcomm/SC/MDM/SDA/SXR dev...