14869 matches found
Arbitrary Code Execution
optipng is vulnerable to arbitrary code execution. A heap-based buffer overflow in the bmpreadrows function in pngxrbmp.c remote attackers to execute arbitrary code on the host OS...
Denial Of Service (DoS)
Sound eXchange is vulnerable to denial of service attacks. A heap-based buffer overflow in the ImaExpandS function of imarw.c could lead to a denial of service attack during conversion of an audio file...
Denial Of Service (DoS)
gpac is vulnerable to denial of service. A heap-based buffer over-read in BSReadByte called from gfbsreadbit in utils/bitstream.c allows an attacker to crash the application via a malicious MP4 file...
Integer Overflow
FuseISO is vulnerable to integer overflow. The vulnerability might allow remote attackers to cause a denial of service via a large ZF block size in an ISO file, leading to a heap-based buffer overflow...
Denial Of Service (DoS)
GPAC is vulnerable to denial of service. The vulnerability existed because it contains a heap-based buffer over-read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...
Denial Of Service (DoS)
opensc is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer overflow in scoberthurreadfile...
CVE-2020-6017
Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNPReceiveUnreliableSegment when configured to support plain-text messages, leading to a Heap-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code...
CVE-2020-6017
Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNPReceiveUnreliableSegment when configured to support plain-text messages, leading to a Heap-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code...
Heap overflow
Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNPReceiveUnreliableSegment when configured to support plain-text messages, leading to a Heap-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code...
CVE-2020-6017
Valve’s Game Networking Sockets (Steam Sockets) prior to v1.2.0 is affected by CVE-2020-6017 due to SNP_ReceiveUnreliableSegment() mishandling long unreliable segments when plain-text messages are enabled, causing a heap-based buffer overflow that can lead to memory corruption and potential remot...
openSUSE Security Update : xorg-x11-server (openSUSE-2020-2147)
This update for xorg-x11-server fixes the following issues : - CVE-2020-25712: Fixed a heap-based buffer overflow which could have led to privilege escalation bsc1177596. - CVE-2020-14360: Fixed an out of bounds memory accesses on too short request which could lead to denial of service bsc1174908...
Denial Of Service (DoS)
oniguruma is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer overflow in strlowercasematch in regexec.c...
Buffer Over-read
oniguruma is vulnerable to Heap-based buffer over-read. It is possible because of a flaw in the function gb18030mbcenclen in file gb18030.c...
CVE-2020-28575
A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for Linux 3.0 may allow an attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target in order to exploit this...
CVE-2020-28575
CVE-2020-28575 concerns Trend Micro ServerProtect for Linux 3.0. A heap-based buffer overflow in the Kernel Hook Module (KHM) used by ServerProtect allows local privilege escalation when an attacker can execute high-privileged code. The root cause is improper handling/validation of data length in...
CVE-2020-29367
A heap-based buffer overflow vulnerability was found in the blosc library. Depending on how the library is used, if there is a lack of space to write compressed data, an attacker can exploit this flaw to crash the program or potentially execute arbitrary code. The highest threat from this...
CVE-2020-25181
WECON PLC Editor Versions 1.3.8 and prior has a heap-based buffer overflow vulnerabilities have been identified that may allow arbitrary code execution...
Heap overflow
WECON PLC Editor Versions 1.3.8 and prior has a heap-based buffer overflow vulnerabilities have been identified that may allow arbitrary code execution...
Moderate: Red Hat Security Advisory: rh-php73-php security, bug fix, and enhancement update
An update for rh-php73-php is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
