CVE-2019-20140

An issue was discovered in libsixel 1.8.4. There is a heap-based buffer overflow in the function gifoutcode at fromgif.c...

CVE-2019-20140

CVE-2019-20140 affects libsixel 1.8.4, with a heap-based buffer overflow in the function gif_out_code in fromgif.c. This is corroborated by Red Hat’s advisory and multiple CVE aggregators. The available documents do not specify a patched version or workaround. References point to Libsixel issue #...

CVE-2019-20024

A heap-based buffer overflow was discovered in imagebufferresize in fromsixel.c in libsixel before 1.8.4...

CVE-2019-20024

CVE-2019-20024 impacts libsixel: a heap-based buffer overflow in image_buffer_resize (fromsixel.c) occurs in all versions before 1.8.4. The Red Hat entry reproduces this, and multiple PTSecurity notes discuss related libsixel issues. Public references indicate the vulnerability exists in the ment...

Updated libmirage packages fix security vulnerabilities

Updated libmirage packages fix security vulnerabilities: The CSO filter in libMirage in CDemu did not validate the part size, triggering a heap-based buffer overflow that could lead to root access by a local user CVE-2019-15540. NULL pointer dereference in the NRG parser CVE-2019-15757...

CVE-2019-19951

In GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function ImportRLEPixels of coders/miff.c...

CVE-2019-19948

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c...

CVE-2019-19948

CVE-2019-19948 — ImageMagick heap-based buffer overflow in the SGI writer. Root cause: WriteSGIImage in coders/sgi.c overruns the heap when handling SGI images. Affected software: ImageMagick 7.0.8-43 Q16 (and related entries in advisory history). Impact: the vulnerability is described as a heap-...

CVE-2019-19951

CVE-2019-19951 affects GraphicsMagick; the issue is a heap-based buffer overflow in ImportRLEPixels() within coders/miff.c (GraphicsMagick 1.4 snapshot-20190423 Q8). Reports in connected documents confirm a heap-based overflow in ImportRLEPixels and document fixes: Mageia MGASA-2020-0102 notes th...

CVE-2019-19951

In GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function ImportRLEPixels of coders/miff.c...

CVE-2019-18389

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGLCCMDRESOURCEINLINEWRITE commands...

CVE-2019-18389

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGLCCMDRESOURCEINLINEWRITE commands...

Heap overflow

In libIEC61850 1.4.0, MmsValuedecodeMmsData in mms/isomms/server/mmsaccessresult.c has a heap-based buffer overflow...

CVE-2019-19931

In libIEC61850 1.4.0, MmsValuedecodeMmsData in mms/isomms/server/mmsaccessresult.c has a heap-based buffer overflow...

CVE-2019-18389

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGLCCMDRESOURCEINLINEWRITE commands...

EulerOS 2.0 SP5 : exiv2 (EulerOS-SA-2019-2710)

According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer over-read via a...

EulerOS 2.0 SP5 : libtiff (EulerOS-SA-2019-2707)

According to the version of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - tifgetimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a...

EulerOS 2.0 SP5 : binutils (EulerOS-SA-2019-2686)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils through 2.31. There is a heap-bas...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3379-1)

The SUSE Linux Enterprise 12 SP 3 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel in Marvell WiFi chip driver. The flaw could occur when the station attempts ...

CVE-2019-18391

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGLCCMDRESOURCEINLINEWRITE commands...