CVE-2018-19662

CVE-2018-19662 affects the libsndfile library (version 1.0.28) with a buffer over-read in the i2alaw_array function in alaw.c, leading to denial of service. Connected advisories confirm an upgraded/updated libsndfile release resolves the issue (e.g., enterprise/Linux distro advisories; Debian/Red...

CVE-2018-19661

CVE-2018-19661 affects libsndfile 1.0.28 with a buffer over-read in i2ulaw_array (ulaw.c) that can cause denial of service. Connected Nessus entries (RHEL, Oracle, TencentOS advisories) confirm the vulnerability occurrence in libsndfile; no patch details are provided in the supplied documents. Re...

CVE-2018-19661

An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulawarray in ulaw.c that will lead to a denial of service...

CVE-2018-19661

An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulawarray in ulaw.c that will lead to a denial of service...

CVE-2018-19662

An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alawarray in alaw.c that will lead to a denial of service...

CVE-2018-19662

An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alawarray in alaw.c that will lead to a denial of service...

CVE-2018-19664

CVE-2018-19664 affects libjpeg-turbo 2.0.1. The issue is a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg. The connected OSV entry confirms the same root cause. The available documents describe the vulnerability as a read past the buffer, potential...

Heap overflow

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuffcomposite.c by preventing a heap-based buffer over-read...

CVE-2018-19625

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuffcomposite.c by preventing a heap-based buffer over-read...

CVE-2018-19625

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuffcomposite.c by preventing a heap-based buffer over-read...

CVE-2018-19625

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuffcomposite.c by preventing a heap-based buffer over-read...

CVE-2018-19625

CVE-2018-19625 affects Wireshark 2.6.0–2.6.4 and 2.4.0–2.4.10. The dissection engine could crash due to a heap-based buffer over-read in epan/tvbuff_composite.c, which was addressed by preventing the over-read. According to the connected material, this is a defect in the dissection engine, with n...

CVE-2018-19625

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuffcomposite.c by preventing a heap-based buffer over-read...

CVE-2018-19625

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuffcomposite.c by preventing a heap-based buffer over-read...

CVE-2018-19625

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuffcomposite.c by preventing a heap-based buffer over-read...

CVE-2018-18313

Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory...

CVE-2018-19661

An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulawarray in ulaw.c that will lead to a denial of service...

CVE-2018-19662

An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alawarray in alaw.c that will lead to a denial of service...

CVE-2017-18315

Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600...

CVE-2017-18315

CVE-2017-18315 describes a buffer over-read in an older ASN.1 parser in Qualcomm Snapdragon Mobile SD600. Affected component is the Snapdragon SD 600 platform; root cause is a vulnerability in the ASN.1 parsing code that can lead to a local vulnerability with complete impact on confidentiality, i...