CVE-2017-8287

FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1builderclosecontour function in psaux/psobjs.c...

CVE-2017-8287

FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1builderclosecontour function in psaux/psobjs.c...

CVE-2017-8287

FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1builderclosecontour function in psaux/psobjs.c...

CVE-2017-8287

CVE-2017-8287 affects FreeType 2 up to 2.7.1, with an out-of-bounds write caused by a heap-based buffer overflow in psaux/psobjs.c:t1_builder_close_contour. This can enable remote code execution via malformed fonts. Advisories (e.g., Arch Linux ASA-201705-7/-10 and distro advisories) recommend up...

CVE-2017-6037

CVE-2017-6037 affects Wecon Technologies LEVI Studio HMI Editor (pre-1.8.1). A heap-based buffer overflow occurs when running a maliciously crafted project file, with CVSS v3 base score 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Related CNVD/NVD entries corroborate a similar vulnerability; ICS-CE...

Debian DLA-918-1 : freetype security update

It was found that an out of bounds write caused by a heap-based buffer overflow could be triggered in freetype via a crafted font. This update also reverts the fix for CVE-2016-10328, as it was determined that freetype 2.4.9 is not affected by that issue. For Debian 7 'Wheezy', these problems hav...

Out-of-Bounds Write

freetype is vulnerable to an out-of-bounds write. A malicious user can pass a cff font file to the application to cause a heap-based buffer overflow that can lead to an out-of-bounds write. This can cause the application to crash or overwrite values in the heap...

CVE-2017-8287

FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1builderclosecontour function in psaux/psobjs.c...

CVE-2017-8105

FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1decoderparsecharstrings function in psaux/t1decode.c...

CVE-2017-8105

FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1decoderparsecharstrings function in psaux/t1decode.c...

CVE-2017-8105

CVE-2017-8105 affects FreeType 2 and earlier (up to 2017-03-24 release), with an out-of-bounds heap write in t1_decoder_parse_charstrings (psaux/t1decode.c). Connected sources confirm remote code execution risk and/or denial of service in several Linux distributions; impacted packages include fre...

CVE-2017-8105

FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1decoderparsecharstrings function in psaux/t1decode.c...

CVE-2017-7864

FreeType 2 before 2017-02-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the ttsizereset function in truetype/ttobjs.c...

CVE-2017-7857

FreeType 2 before 2017-03-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the TTGetMMVar function in truetype/ttgxvar.c and the sfntinitface function in sfnt/sfobjs.c...

Debian DLA-910-1 : libreoffice security update

CVE-2017-3157 Ben Hayak discovered that objects embedded in Writer and Calc documents may result in information disclosure. Please see https://www.libreoffice.org/about-us/security/advisories/cve-2017-3157 / for additional information. CVE-2017-7870 An out-of-bounds write caused by a heap-based...

Ubuntu: Security Advisory (USN-3263-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : GraphicsMagick (ALAS-2017-820)

The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service out-of-bounds read and application crash via a small samples per pixel value in a CMYKA TIFF file.CVE-2017-6335 The WPG format reader in GraphicsMagick 1.3.2...

CVE-2016-7520

CVE-2016-7520 : ImageMagick has a heap-based overflow in coders/hdr.c that can trigger a denial of service via a crafted HDR file, due to an out-of-bounds read. The vulnerability is demonstrated in the description as a remote-exploitable issue. The connected Nessus/NVD data confirms the same tech...

CVE-2016-7525

CVE-2016-7525 is a vulnerability in ImageMagick where the heap-based buffer overflow in the PSD file handling (coders/psd.c) can be triggered by a crafted PSD file, leading to a possible denial of service via out-of-bounds read. The connected Nessus/F5 entries enumerate ImageMagick PSD-related is...

CVE-2016-4650

Heap-based buffer overflow in IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...