15211 matches found
CVE-2019-16347
ngiflib 0.4 has a heap-based buffer overflow in WritePixels in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled...
CVE-2019-16346
ngiflib 0.4 has a heap-based buffer overflow in WritePixel in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled...
CVE-2018-21016
audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...
Heap overflow
ngiflib 0.4 has a heap-based buffer overflow in WritePixel in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled...
Heap overflow
ffjpeg before 2019-08-21 has a heap-based buffer overflow in jfifload at jfif.c...
CVE-2018-21016
audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...
CVE-2018-21016
CVE-2018-21016 affects GPAC 0.7.1; audio_sample_entry_AddBox() in isomedia/box_code_base.c allows a crafted file to trigger a heap-based buffer over-read, causing denial of service (application crash). Public docs confirm GPAC vulnerability details and downstream advisories (Debian DLA-2072-1 / M...
CVE-2019-16346
CVE-2019-16346 concerns ngiflib 0.4, where a heap-based buffer overflow occurs in WritePixel() of ngiflib.c when invoked via DecodeGifImg. The root cause is described as mishandled deinterlacing for small pictures, leading to memory corruption. The available references document this vulnerability...
CVE-2019-16346
ngiflib 0.4 has a heap-based buffer overflow in WritePixel in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled...
CVE-2019-16347
ngiflib 0.4 has a heap-based buffer overflow in WritePixels in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled...
CVE-2019-16352
CVE-2019-16352 affects ffjpeg, a simple JPEG encoding/decoding library. The vulnerability is a heap-based buffer overflow in the jfif_load() function (jfif.c). Versions prior to 2019-08-21 are susceptible; exploitation could lead to a heap overflow. Publicly available detail across sources (NVD, ...
RHEL 8 : poppler (RHSA-2019:2713)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2713 advisory. Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. Security Fixes: poppler: heap-based buffer...
EulerOS 2.0 SP5 : bash (EulerOS-SA-2019-1911)
According to the version of the bash package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A heap-based buffer overflow was discovered in bash when wide characters, not supported by the current locale set in LCCTYPE environment variable, are...
EulerOS 2.0 SP5 : poppler (EulerOS-SA-2019-1898)
According to the version of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsamplerowboxfilter function.CVE-2019-9631 Note that Tenable Network...
EulerOS 2.0 SP5 : ImageMagick (EulerOS-SA-2019-1889)
According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ImageMagick before 7.0.8-50 has a 'use of uninitialized value' vulnerability in the function ReadCUTImage in coders/cut.c.CVE-2019-13135 -...
EulerOS 2.0 SP5 : libjpeg-turbo (EulerOS-SA-2019-1892)
According to the version of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get8bitrow in rdbmp.c leads to denial of service CVE-2018-14498 Note tha...
EulerOS 2.0 SP5 : binutils (EulerOS-SA-2019-1887)
According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference aka SEGV on unknown address 0x000000000000 was discovered in workstuffcopytofrom in cplus-dem.c in GNU libiberty, a...
EulerOS 2.0 SP5 : unzip (EulerOS-SA-2019-1880)
According to the versions of the unzip package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow exists in Info-Zip UnZip version = 6.00 in the processing of password-protected archives that allows an attacker to...