CVE-2019-14072

CVE-2019-14072 describes a race condition in Qualcomm/Snapdragon kernel/JPU handling leading to an unhandled paging request by dereferencing a freed object due to concurrent sparse free and sparse bind ioctls. Affected are Snapdragon Auto/Compute/IoT/Wearables platforms across numerous SoCs (e.g....

PT-2020-5525

Name of the Vulnerable Software and Affected Versions: NVIDIA Virtual GPU Manager affected versions not specified Description: The issue is related to a problem with pointer dereferencing errors in the nvidia.ko module of the NVIDIA Virtual GPU Manager, a driver for NVIDIA Virtual GPU. Exploitati...

PT-2019-4491

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.4.7 Description The issue is related to errors in pointer dereferencing in the Linux kernel component drivers/scsi/libsas/sas discover.c. It may allow an attacker to cause a denial of service due to incorrect...

DEBIAN-CVE-2019-19203

An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function gb18030mbcenclen in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read...

CVE-2019-2334

Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650...

CVE-2019-2334

CVE-2019-2334 is a null pointer dereference in Snapdragon media handling that can occur when playing a clip with a wrong block group id, affecting a broad set of Qualcomm Snapdragon products (Auto, Compute, IoT, Mobile, Wearables, etc.). The NVD and Red Hat entries rate it as HIGH severity with C...

CVE-2019-2334

Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650...

PT-2019-16398

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9150 through SD 855 Qualcomm Snapdragon Compute versions MDM9150 through SD 855 Qualcomm Snapdragon Consumer IOT versions MDM9150 through SD 855 Qualcomm Snapdragon Industrial IOT versions MDM9150 through S...

The vulnerability of the g_markup_parse_context_end_parse function in the Glib library allows a hacker to trigger a service failure.

The vulnerability of the gmarkupparsecontextendparse function in the Glib library is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the libsolv library, related to pointer dereferencing errors, allows a hacker to trigger a service failure.

The vulnerability of the testcaseread function in the libsolv library is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the LibVNC library, related to pointer dereferencing errors, allows a hacker to trigger a service failure.

The vulnerability of the LibVNC library is related to pointer dereferencing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Eclipse OpenJ9 Buffer Overflow Vulnerability (CNVD-2019-39191)

Eclipse OpenJ9 is a Java application engine from the Eclipse Foundation. The product is primarily used to run Java applications. A security vulnerability exists in the OpenJDK + Eclipse OpenJ9 0.11.0 builds. An attacker can exploit the vulnerability to accept pointer values that are dereferenced ...

LAquis SCADA LGX Report MemoryReadDouble Untrusted Pointer Dereference Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

SUSE SLES12 Security Update : php7 (SUSE-SU-2017:0017-1)

This update for php7 fixes the following issues : - CVE-2016-9933 Possible stack overflow on truecolor images handling bsc1015187 - CVE-2016-9934 Dereference from NULL pointer could lead to crash bsc1015188 - CVE-2016-9935 Invalid read could lead to crash bsc1015189 - CVE-2016-9936 Use After free...

Mozilla Firefox ESR < 52.5 Multiple Vulnerabilities

Binary data 700332.prm...

xml-security-c -- crashes on malformed KeyInfo content

The shibboleth project reports: SAML messages, assertions, and metadata all commonly make use of the XML Signature KeyInfo construct, which expresses information about keys and certificates used in signing or encrypting XML. The Apache Santuario XML Security for C++ library contained code paths a...

Denial Of Service (DoS)

libraw.so is vulnerable to denial of service DoS attacks. The attack can be triggered due to a flaw in unpack function src/librawcxx.cpp, causing null pointer dereferencing...

PT-2018-3825

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.9 Description The issue is related to errors in pointer dereferencing within the nikon coolscan load raw function in the internal/dcraw common.cpp component of the LibRaw image processing library. This can be...

Unspecified vulnerability in Omron CX-Supervisor (CNVD-2018-05320)

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A security vulnerability exists in Omron CX-Supervisor version 3.30, which can be exploited by an attacker to dereference untrusted pointers via an...

SUSE-SU-2017:2076-1 Security update for ncurses

This update for ncurses fixes the following issues: Security issues fixed: - CVE-2017-11112: Illegal address access in appendacs. bsc1047964 - CVE-2017-11113: Dereferencing NULL pointer in ncparseentry. bsc1047965 - CVE-2017-10684, CVE-2017-10685: Add modified upstream fix from ncurses 6.0 to avo...