12215 matches found
CVE-2015-9382
FreeType vulnerability CVE-2015-9382 affects FreeType before 2.6.1. Root cause: buffer over-read in skip_comment (psobjs.c) due to mishandling of ps_parser_skip_PS_token in an FT_New_Memory_Face operation. In practice, this can lead to information disclosure or memory-related denial of service (a...
CVE-2015-9381
FreeType vulnerability CVE-2015-9381 affects FreeType before 2.6.1, with a heap-based buffer over-read in T1_Get_Private_Dict (type1/t1parse.c). This can lead to information disclosure. Connected sources confirm the issue is due to a memory boundary validation flaw in that function. Remediation s...
CVE-2015-9381
FreeType before 2.6.1 has a heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c...
SUSE SLES12 Security Update : php72 (SUSE-SU-2019:2270-1)
This update for php72 fixes the following issues : Security issues fixed : CVE-2019-11041: Fixed heap buffer over-read in exifscanthumbnail bsc1146360. CVE-2019-11042: Fixed heap buffer over-read in exifprocessusercomment bsc1145095. Note that Tenable Network Security has extracted the preceding...
CVE-2015-9382
FreeType before 2.6.1 has a buffer over-read in skipcomment in psaux/psobjs.c because psparserskipPStoken is mishandled in an FTNewMemoryFace operation...
CVE-2015-9383
FreeType before 2.6.2 has a heap-based buffer over-read in ttcmap14validate in sfnt/ttcmap.c...
SUSE-SU-2019:2270-1 Security update for php72
This update for php72 fixes the following issues: Security issues fixed: - CVE-2019-11041: Fixed heap buffer over-read in exifscanthumbnail bsc1146360. - CVE-2019-11042: Fixed heap buffer over-read in exifprocessusercomment bsc1145095...
CVE-2019-15026
memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conntostr in memcached.c...
CVE-2019-15026
memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conntostr in memcached.c...
CVE-2019-15026
CVE-2019-15026 affects memcached 1.5.16 when using UNIX sockets, due to a stack-based buffer over-read in conn_to_str (memcached.c). The issue is documented across multiple security advisories and Nessus plugins, with various distributions noting a fix or update in their memcached packages. The c...
libjpeg, turbojpeg security update
CentOS Errata and Security Advisory CESA-2019:2052 An update for libjpeg-turbo is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
CVE-2019-14369
Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...
CVE-2019-14368
Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata in rafimage.cpp...
CentOS 7 : curl (CESA-2019:2181)
An update for curl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE li...
CentOS 7 : libjpeg-turbo (CESA-2019:2052)
An update for libjpeg-turbo is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
CVE-2019-14776
A heap-based buffer over-read exists in DemuxInit in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file...
Heap overflow
A heap-based buffer over-read exists in DemuxInit in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file...
CVE-2019-14776
A heap-based buffer over-read exists in DemuxInit in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file...