CVE-2018-14587

An issue has been discovered in Bento4 1.5.1-624. AP4MemoryByteStream::WritePartial in Core/Ap4ByteStream.cpp has a buffer over-read...

CVE-2018-14587

An issue has been discovered in Bento4 1.5.1-624. AP4MemoryByteStream::WritePartial in Core/Ap4ByteStream.cpp has a buffer over-read...

CVE-2018-14584

CVE-2018-14584 affects Bento4 1.5.1-624, where the vulnerable code path is AP4_AvccAtom::Create in Core/Ap4AvccAtom.cpp, causing a heap-based buffer over-read. This is documented across multiple sources (NVD entry and CNVD/OSV/etc.), with CVSS scores indicating substantial impact (NVD: 2.0/3.0 ve...

CVE-2018-14589

Bento4 1.5.1-624 contains a heap-based buffer over-read in AP4_Mp4AudioDsiParser::ReadBits (Codecs/Ap4Mp4AudioInfo.cpp). The issue is confirmed across multiple sources (NVD/CVE-2018-14589, CNVD/UBUNTU, osv, etc.), but the connected documents do not provide an approved remediation or patch details...

CVE-2018-14584

An issue has been discovered in Bento4 1.5.1-624. AP4AvccAtom::Create in Core/Ap4AvccAtom.cpp has a heap-based buffer over-read...

CVE-2018-14587

CVE-2018-14587 : Technical details in provided sources show Bento4 version 1.5.1-624 is affected by a buffer over-read in AP4_MemoryByteStream::WritePartial (Core/Ap4ByteStream.cpp). This vulnerability is confirmed across multiple external databases (NVD, CNVD, osv OSV) and vendor ecosystems, whi...

CVE-2018-14585

The vulnerability CVE-2018-14585 affects Bento4 1.5.1-624, specifically AP4_BytesToUInt16BE in Core/Ap4Utils.h, which suffers a heap-based buffer over-read triggered via AP4_Stz2Atom. The issue is a memory-safety flaw within Bento4’s MP4 I/O utilities. Public references in the provided connected ...

CVE-2018-14587: Out-of-bounds Read

An issue has been discovered in Bento4 1.5.1-624. AP4MemoryByteStream::WritePartial in Core/Ap4ByteStream.cpp has a buffer over-read...

CVE-2018-14584: Out-of-bounds Read

An issue has been discovered in Bento4 1.5.1-624. AP4AvccAtom::Create in Core/Ap4AvccAtom.cpp has a heap-based buffer over-read...

CVE-2018-14589: Out-of-bounds Read

An issue has been discovered in Bento4 1.5.1-624. AP4Mp4AudioDsiParser::ReadBits in Codecs/Ap4Mp4AudioInfo.cpp has a heap-based buffer over-read...

CVE-2018-14585: Out-of-bounds Read

An issue has been discovered in Bento4 1.5.1-624. AP4BytesToUInt16BE in Core/Ap4Utils.h has a heap-based buffer over-read after a call from the AP4Stz2Atom class...

CVE-2018-14460

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Osdspacedecode in H5Osdspace.c...

CVE-2018-14565

An issue was discovered in libthulac.so in THULAC through 2018-02-25. A heap-based buffer over-read can occur in NGramFeature::findbases in include/cbngramfeature.h...

Heap overflow

An issue was discovered in libthulac.so in THULAC through 2018-02-25. A heap-based buffer over-read can occur in NGramFeature::findbases in include/cbngramfeature.h...

SUSE-SU-2018:2043-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: The following security vulnerabilities were fixed: - CVE-2018-11625: Fixed heap-based buffer over-read in SetGrayscaleImage in the quantize.c file, which allowed remote attackers to cause buffer over-read via a crafted file. bsc1096200 -...

CVE-2018-14565

An issue was discovered in libthulac.so in THULAC through 2018-02-25. A heap-based buffer over-read can occur in NGramFeature::findbases in include/cbngramfeature.h...

CVE-2018-14565

CVE-2018-14565 is a vulnerability in THULAC’s libthulac.so where a heap-based buffer over-read can occur in NGramFeature::find_bases (include/cb_ngram_feature.h) up to 2018-02-25. Public descriptions (CNVD/NVD) indicate exploitation could crash an affected application and cause a denial of servic...

CVE-2018-14370

In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bounds checking that prevents a buffer over-read...

CVE-2018-14340

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuffzlib.c by rejecting negative lengths to avoid a buffer over-read...

CVE-2018-14344

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in epan/dissectors/packet-ismp.c by validating the IPX address length to avoid a buffer over-read...