3198 matches found
CVE-2019-15651: Out-of-bounds Read
wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading the ASNBOOLEAN byte is mishandled for a crafted DER certificate in GetLengthex...
Heap overflow
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTORdviextractmethod in plugins/dviextractor.c...
CVE-2019-15531
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTORdviextractmethod in plugins/dviextractor.c...
CVE-2019-15531
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTORdviextractmethod in plugins/dviextractor.c...
CVE-2019-15531: Out-of-bounds Read
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTORdviextractmethod in plugins/dviextractor.c...
PT-2019-14248
Name of the Vulnerable Software and Affected Versions GNU Libextractor versions prior to 1.10 ALT Linux affected versions not specified Description The issue is related to a heap-based buffer over-read in the EXTRACTOR dvi extract method function, located in plugins/dvi extractor.c. Recommendatio...
openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2019:1983-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Arbitrary Code Execution
php is vulnerable to arbitrary code execution. A heap-based buffer over-read in the mbstring regular expression functions allows an attacker to execute arbitrary code on the system...
openSUSE Security Update : vlc (openSUSE-2019-1909)
This update for vlc to version 3.0.7.1 fixes the following issues : Security issues fixed : - CVE-2019-5439: Fixed a buffer overflow bsc1138354. - CVE-2019-5459: Fixed an integer underflow bsc1143549. - CVE-2019-5460: Fixed a double free bsc1143547. - CVE-2019-12874: Fixed a double free in...
SUSE SLES12 Security Update : glibc (SUSE-SU-2019:1958-2)
This update for glibc fixes the following issues : Security issues fixed : CVE-2019-9169: Fixed a heap-based buffer over-read via an attempted case-insensitive regular-expression match bsc1127308. CVE-2009-5155: Fixed a denial of service in parseregexp bsc1127223. Non-security issues fixed: Added...
CVE-2019-15142
In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read by crafting a DJVU file...
CVE-2019-15142
In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read by crafting a DJVU file...
CVE-2019-15141
WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service application crash resulting from a heap-based buffer over-read via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and...
CVE-2019-15141
WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service application crash resulting from a heap-based buffer over-read via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and...
CVE-2019-15142
In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read by crafting a DJVU file...
CVE-2019-15142
CVE-2019-15142 affects DjVuLibre 3.5.27 in the DJVU reader component. The vulnerability arises in DjVmDir.cpp (and related GString handling) where the code reads a DJVU file into a GTArray and then uses a UTF-8 string path, leading to a heap-based out-of-bounds read and a denial-of-service crash ...
CVE-2019-15142
In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read by crafting a DJVU file...
CVE-2019-15142
In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read by crafting a DJVU file...
CVE-2019-15146
CVE-2019-15146 affects the GoPro GPMF-parser v1.2.2 . The vulnerability is a heap-based buffer over-read (4 bytes) in the function GPMF_Next within GPMF_parser.c . The incident arises from improper memory boundary checks, allowing reads past the allocated buffer. Documented impact in CVE entries ...