PT-2019-5691 · Exiv2 +8 · Exiv2 +8

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.27.2 Description: The issue is related to a lack of validation in the Exiv2 library, specifically in the crwimage int.cpp module, which can lead to a crash when the getULong function is called from CiffDirectory::readDirectory...

DEBIAN-CVE-2019-14296

canUnpack in pvmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service SEGV or buffer overflow, and application crash or possibly have unspecified other impact via a crafted UPX packed file...

AZL-34973 CVE-2019-14274 affecting package mcpp for versions less than 2.7.2-28

MCPP 2.7.2 has a heap-based buffer overflow in the domsg function in support.c...

CVE-2019-2118

In various functions of Parcel.cpp, there are uninitialized or partially initialized stack variables. These could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8...

CVE-2019-13147

In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file...

CVE-2019-13147

In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file...

CVE-2019-13147

In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file...

Null pointer dereference

In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file...

CVE-2019-13147

In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file...

PT-2019-2965

Name of the Vulnerable Software and Affected Versions Audio File Library versions 0.3.6 Description The issue is related to a NULL pointer dereference bug in the ulaw2linear buf function in G711.cpp within the libmodules.a library. This bug allows an attacker to cause a denial of service via a...

CVE-2019-13147

In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file...

CVE-2019-13147

CVE-2019-13147 affects Audio File Library (audiofile) 0.3.6, via a NULL pointer dereference in ulaw2linear_buf (G711.cpp in libmodules.a) that could cause a denial of service with a crafted file. Connected advisories confirm fixes across distros: Debian 0.3.6-5+deb11u1; openSUSE/SUSE updates (e.g...

CVE-2019-13147: NULL Pointer Dereference

In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file...

CVE-2019-13147

In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file...

CVE-2018-20840

An unhandled exception vulnerability exists during Google Sign-In with Google API C++ Client before 2019-04-10. It potentially causes an outage of third-party services that were not designed to recover from exceptions. On the client, ID token handling can cause an unhandled exception because of...

CVE-2018-20840: Improper Check for Unusual or Exceptional Conditions

An unhandled exception vulnerability exists during Google Sign-In with Google API C++ Client before 2019-04-10. It potentially causes an outage of third-party services that were not designed to recover from exceptions. On the client, ID token handling can cause an unhandled exception because of...

PT-2019-10272

Name of the Vulnerable Software and Affected Versions: google-api-cpp-client versions prior to 2019-04-10 Description: The issue is related to an unhandled exception during Google Sign-In with the Google API C++ Client. This exception can cause a denial-of-service, leading to an outage of...

CVE-2019-3565: Excessive Iteration

Legacy C++ Facebook Thrift servers using cpp instead of cpp2 would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service...

PT-2019-16614

Name of the Vulnerable Software and Affected Versions Facebook Thrift versions prior to 2019.05.06.00 Description The issue arises when Legacy C++ Facebook Thrift servers, using cpp instead of cpp2, fail to error upon receiving messages containing containers of fields of unknown type. This allows...

yaml-cpp denial of service vulnerability

yaml-cpp is a YAML parser written in C++. A denial of service vulnerability exists in the SingleDocParser::HandleFlowSequence function in yaml-cpp 0.6.2. A remote attacker can cause a denial of service stack consumption and application crash via a specially crafted YAML file...