2139 matches found
Heap overflow
The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...
CVE-2018-14017
The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...
CVE-2018-14017
The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...
Heap overflow
The rbinmdmpinitdirectoryentry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Mini Crash Dump file...
CVE-2018-14016
The rbinmdmpinitdirectoryentry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Mini Crash Dump file...
CVE-2018-14017
The CVE-2018-14017 entry affects radare2 (version 2.7.0) specifically the r_bin_java_annotation_new function in shlr/java/class.c. The vulnerability arises from missing input validation in r_bin_java_line_number_table_attr_new, enabling remote attackers to craft a .class file that triggers a heap...
CVE-2018-14016
The CVE-2018-14016 issue affects radare2 2.7.0, specifically the r_bin_mdmp_init_directory_entry function in mdmp.c. A crafted Mini Crash Dump file can trigger a heap-based buffer over-read, leading to an application crash (DoS). All sources consistently describe this vulnerability as a remote-tr...
CVE-2018-13868
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Ofillolddecode in H5Ofill.c...
CVE-2018-13870
CVE-2018-13870 affects HDF5 1.8.20, causing a heap-based buffer over-read in H5O_link_decode (H5Olink.c). The vulnerability is cited across multiple advisories (e.g., SUSE-SU-2022:1933-1, SUSE-SU-2022:1911-1, SUSE-SU-2022:1903-1) and is acknowledged in Nessus OSVs as part of unpatched/have fixes....
CVE-2018-13868
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Ofillolddecode in H5Ofill.c...
CVE-2018-13846
An issue has been found in Bento4 1.5.1-624. AP4Mpeg2TsVideoSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp has a heap-based buffer over-read after a call from Mp42Ts.cpp, a related issue to CVE-2018-14532...
CVE-2018-13846
An issue has been found in Bento4 1.5.1-624. AP4Mpeg2TsVideoSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp has a heap-based buffer over-read after a call from Mp42Ts.cpp, a related issue to CVE-2018-14532...
CVE-2018-13421
Fast C++ CSV Parser aka fast-cpp-csv-parser before 2018-07-06 has a heap-based buffer over-read in io::trimchars in csv.h...
CVE-2018-13112
getl2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packets, as demonstrated by tcpprep...
CVE-2018-13112
CVE-2018-13112 affects Tcpreplay (and its tcpprep-related routines) in version 4.3.0 beta1, where the function get_l2len in common/get.c may read beyond a heap boundary when processing crafted packet captures, leading to a denial of service (application crash). Public advisories (Fedora, Ubuntu U...
CVE-2018-13112
getl2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packets, as demonstrated by tcpprep...
SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:1851-1)
This update for ImageMagick fixes the following issues: These security issues were fixed : - CVE-2017-13758: Prevent heap-based buffer overflow in the TracePoint function bsc1056277. - CVE-2017-10928: Prevent heap-based buffer over-read in the GetNextToken function that allowed remote attackers t...
Updated taglib packages fix security vulnerability
The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file. CVE-2018-11439...