Lucene search
K

10 matches found

Redos
Redos
added 2026/04/01 12:0 a.m.3 views

ROS-20260401-73-0008

A vulnerability in the pngimagereadcomposite function of the libpng library is related to reading data outside of buffer boundaries in memory. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality and availability of protected information using a specially...

7.1CVSS6.6AI score0.00137EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2025/12/20 12:0 a.m.3 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libpng16 (SUSE-SU-2025:4494-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4494-1 advisory. - CVE-2025-65018: Fixed heap buffer overflow in pngcombinerow triggered via pngimagefinishread...

7.1CVSS6.1AI score0.00137EPSS
Exploits6References16
SUSE CVE
SUSE CVE
added 2024/09/21 3:40 a.m.2 views

SUSE CVE-2024-9029

A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the readiptcprofile function in the Source/Metadata/IPTC.cpp file because the size of the profile is not being sanitized, causing a crash in the application linked to the library,...

7.5CVSS6.6AI score0.00132EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:53 a.m.0 views

SUSE CVE-2011-1959

The snoopread function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service application crash via a large length value in a snoop file that triggers a stack-bas...

4.3CVSS7.5AI score0.01937EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:59 a.m.2 views

SUSE CVE-2016-6288

The phpurlparseex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers to cause a denial of service buffer over-read or possibly have unspecified other impact via vectors involving the smartstr data type...

9.8CVSS9.2AI score0.04325EPSS
Exploits0References8
OSV
OSV
added 2019/10/12 8:15 p.m.0 views

UBUNTU-CVE-2019-17529

An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4CencSampleEncryption::DoInspectFields in Core/Ap4CommonEncryption.cpp when called from AP4Atom::Inspect in Core/Ap4Atom.cpp...

7.8CVSS6AI score0.00165EPSS
Exploits1References4
OSV
OSV
added 2019/10/03 4:15 p.m.0 views

ALPINE-CVE-2018-14466

The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rxcachefind and rxcacheinsert...

7.5CVSS7.5AI score0.01543EPSS
Exploits0References1
OSV
OSV
added 2018/02/26 10:29 p.m.1 views

DEBIAN-CVE-2017-16229

In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the readfromstr function in saxbuf.c when a crafted input is supplied to saxparse...

5.5CVSS5.5AI score0.00165EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2017/11/03 12:0 a.m.33 views

OpenSSL Multiple Vulnerabilities (Nov 2017) - Windows

OpenSSL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl"; ifdescription...

6.5CVSS7.2AI score0.3862EPSS
Exploits0References1
OSV
OSV
added 2016/12/03 6:59 a.m.0 views

DEBIAN-CVE-2016-9802

In BlueZ 5.42, a buffer over-read was identified in "l2cappacket" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

5.3CVSS6.7AI score0.00476EPSS
Exploits1References1
Rows per page
Query Builder