12239 matches found
CVE-2019-3574
In libsixel v1.8.2, there is a heap-based buffer over-read in the function loadjpeg in the file loader.c, as demonstrated by img2sixel...
SUSE SLED15 / SLES15 Security Update : clamav (SUSE-SU-2018:2230-1)
This update for clamav to version 0.100.1 fixes the following issues: The following security vulnerabilities were addressed : - CVE-2018-0360: HWP integer overflow, infinite loop vulnerability bsc1101410 - CVE-2018-0361: PDF object length check, unreasonably long time to parse relatively small fi...
SUSE SLES12 Security Update : php7 (SUSE-SU-2017:2468-1)
This update for php7 fixes several issues. These security issues were fixed : - CVE-2017-12932: Prevent heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue could have...
SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:2043-1)
This update for ImageMagick fixes the following issues: The following security vulnerabilities were fixed : - CVE-2018-11625: Fixed heap-based buffer over-read in SetGrayscaleImage in the quantize.c file, which allowed remote attackers to cause buffer over-read via a crafted file. bsc1096200 -...
SUSE SLED15 / SLES15 Security Update : tcpdump (SUSE-SU-2018:4131-1)
This update for tcpdump fixes the following issues : Security issues fixed : CVE-2018-19519: Fixed a stack-based buffer over-read in the printprefix function bsc1117267 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenab...
SUSE SLES12 Security Update : php5 (SUSE-SU-2017:2518-1)
This update for php5 fixes on issues. This security issue was fixed : - CVE-2017-12933: The finishnesteddata function in ext/standard/varunserializer.re was prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue could have had an unspecified impact on the...
Heap overflow
ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the okmodecode2 function in okmo.c...
CVE-2018-20618
ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the okmodecode2 function in okmo.c...
CVE-2018-20618
CVE-2018-20618 affects ok-file-formats up to 2018-10-16, with a heap-based buffer over-read in the ok_mo_decode2 function (ok_mo.c). Multiple connected sources confirm the vulnerability and scope, noting versions prior to 2018-10-16 are affected. Public documentation provided does not specify a f...
Heap overflow
A heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of libming v0.4.8. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by swftocxx...
CVE-2018-20591
A heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of libming v0.4.8. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by swftocxx...
CVE-2018-20591
A heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of libming v0.4.8. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by swftocxx...
CVE-2018-20591
A vulnerability in libming v0.4.8: a heap-based buffer over-read in the decompileJUMP function (util/decompile.c) can cause segmentation faults and denial-of-service. The issue is demonstrated by swftocxx. Connected sources consistently describe a heap-based over-read in libming v0.4.8; no patch/...
CVE-2018-20588
lib/support/unicodeconv/unicodeconv.c in libotfcc.a in otfcc v0.10.3-alpha has a buffer over-read...
CVE-2018-20588
lib/support/unicodeconv/unicodeconv.c in libotfcc.a in otfcc v0.10.3-alpha has a buffer over-read...
CVE-2018-20588
The CVE-2018-20588 issue is in otfcc v0.10.3-alpha (libotfcc.a), specifically the file lib/support/unicodeconv/unicodeconv.c, where a buffer over-read/overflow exists in the Unicode conversion routine. CNVD-2019-03337 and OSV entries describe a buffer overflow vulnerability in this component, wit...
CVE-2018-20588
lib/support/unicodeconv/unicodeconv.c in libotfcc.a in otfcc v0.10.3-alpha has a buffer over-read...
CVE-2018-20570
jp2encode in jp2/jp2enc.c in JasPer 2.0.14 has a heap-based buffer over-read...