The vulnerability of the Intel Smart Sound Technology driver, related to the execution of operations beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Intel Smart Sound Technology driver is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code with elevated privileges...

PT-2019-17548

Name of the Vulnerable Software and Affected Versions USG9500 versions V500R001C30 through V500R001C60 Description The issue is related to a flaw in the X.509 implementation, which can cause a large heap buffer overrun error. An attacker can exploit this by using a malicious certificate, resultin...

Security Advisory - Multiple Vulnerabilities in the X.509 Implementation in Some Huawei Products

There is a denial of service vulnerability in some Huawei products. Due to a flaw in the X.509 implementation in the affected products which can result in a heap buffer overflow when decoding a certificate, an attacker may exploit the vulnerability by a malicious certificate to perform a denial o...

CVE-2019-5273: Buffer Copy without Checking Size of Input

USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products which can result in a large heap buffer overrun error, an attacker may exploit the vulnerability by a malicious certificate, resulting a deni...

The vulnerability of Adobe Illustrator CC 2019, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe Illustrator CC 2019 is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of VBScript script handlers in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of VBScript script handlers in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially crafted web page or document...

Security Bulletin: A security vulnerability has been identified in Red Hat® Enterprise Linux (RHEL) Server shipped with PurePower Integrated Manager (PPIM)

Summary RHEL Server is shipped as a component of PPIM. Information about a security vulnerability affecting RHEL Server has been published in a Red Hat errata. Vulnerability Details CVEID: CVE-2018-16839 DESCRIPTION: Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SA...

The vulnerability of the Coalesced_MMIO function in the Linux operating system allows a hacker to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the CoalescedMMIO function in Linux operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and accessibility...

The vulnerability of the Unbound DNS server, related to the execution of operations beyond the buffer in memory, allows attackers to cause a service failure.

The vulnerability of the Unbound DNS server is related to an error in processing certain NOTIFY requests. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

Vulnerability of Firefox, Firefox ESR, and Thunderbird email client, caused by an operation that goes beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the e1000e virtual network adapter allows attackers to execute arbitrary code or cause system failures in VMware Workstation and VMware Fusion hypervisors.

The vulnerability of the e1000e virtual network adapter in VMware Workstation and VMware Fusion lies in the fact that data is written beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures remotely...

The vulnerability of the PDFium component in the Google Chrome browser allows a hacker to perform write-offs beyond the buffer in memory.

The vulnerability of the PDFium component in the Google Chrome browser is related to a unit not being properly accounted for. Exploiting this vulnerability allows a malicious actor to perform write-offs beyond the buffer in memory using a specially created PDF file...

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) arises from operations that exceed the buffer limits in memory, allowing an attacker to cause a system failure.

The vulnerability of the microprogrammed software of the Intel Baseboard Management Controller BMC relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure...

The vulnerability of the PDFium PDF-content processor in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers relates to the writing beyond the buffer memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

The vulnerability of the Skia library used by browsers such as Firefox ESR, Firefox, and Google Chrome allows a malicious actor to write arbitrary files to the device’s file system.

The vulnerability of the Skia library used by browsers such as Firefox ESR, Firefox, and Google Chrome relates to writing beyond the buffer boundaries of memory. Exploiting this vulnerability allows a malicious actor to write arbitrary files into the device’s file system remotely...

The vulnerabilities of the XListExtensions functions in the client-side API library for the X Window System libX11 allow a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the XListExtensions function ListExt.c in the client API library for the X Window System libX11 is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

The vulnerability of the plugins\codec\libflacplugin.dll library in the VideoLAN VLC media player allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the plugins\codec\libflacplugin.dll library in the VideoLAN VLC media player is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure using a specially...

The vulnerability of the ReadPNMImage function (coders/pnm.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to cause a service failure.

The vulnerability of the ReadPNMImage function coders/pnm.c in the cross-platform library for working with graphics, GraphicsMagick, arises due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a system failure...

The vulnerability of functions mode4and5 in the hardware/display/cirrus_vga.c file of the QEMU hardware emulation software allows a hacker to induce a service failure.

The vulnerability of functions mode4and5 in the QEMU hardware emulation software hw/display/cirrusvga.c is related to writing beyond the memory buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the GetStyleTokens function (coders/svg.c:314:12) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to trigger a service failure.

The vulnerability of the GetStyleTokens function coders/svg.c:314:12 in the cross-platform library for working with graphics, GraphicsMagick, arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service...