Heap overflow

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...

CVE-2018-11432

The mobiparsemobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

Heap overflow

The mobigetkf8boundaryseqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11439

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file...

CVE-2018-11434

The bufferfill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11433

The mobigetkf8boundaryseqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11434

The bufferfill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11432

The mobiparsemobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11432

The mobiparsemobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11433

The mobigetkf8boundaryseqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11439

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file...

CVE-2018-11436

CVE-2018-11436 affects Libmobi version 0.3. The vulnerability is in the buffer_addraw function of buffer.c, enabling a remote attacker to disclose information via a crafted MOBI file due to a heap-based over-read. The exploitation vector and impact are described as information disclosure; no in-w...

CVE-2018-11432

The mobiparsemobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11433

CVE-2018-11433 affects Libmobi 0.3. The vulnerability lies in mobi_get_kf8boundary_seqnumber (util.c), which can disclose memory via a crafted MOBI file due to a heap-based buffer over-read. Remote attackers could exploit this by using a specially crafted MOBI, enabling information disclosure. Th...

CVE-2018-11432

The connected documents confirm a vulnerability in Libmobi version 0.3 affecting the mobi_parse_mobiheader function in read.c, where a crafted MOBI file can cause information disclosure via a heap-based buffer over-read. This is a remote-triggered flaw with potential partial confidentiality impac...

CVE-2018-11434

The bufferfill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11433

The mobigetkf8boundaryseqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11439

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file...

CVE-2018-11434

The bufferfill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11432

The mobiparsemobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...