CVE-2018-12098

The liblnkdatablockread function in liblnkdatablock.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub...

Integer overflow

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which...

CVE-2018-11728

The libfsntfsreparsepointvaluesreaddata function in libfsntfsreparsepointvalues.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs iss...

Heap overflow

The mobiparseindexentry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11726

The mobidecodefontresource function in util.c in Libmobi 0.3 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted mobi file...

CVE-2018-10945

The mghandlecgi function in mongoose.c in Mongoose 6.11 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash, or NULL pointer dereference via an HTTP request, related to the mbufinsert function...

Heap overflow

DISPUTED The liblnkdatastringgetutf8stringsize function in liblnkdatastring.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on...

CVE-2018-12096

The liblnkdatastringgetutf8stringsize function in liblnkdatastring.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub...

CVE-2018-11726

The mobidecodefontresource function in util.c in Libmobi 0.3 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted mobi file...

CVE-2018-11725

The mobiparseindexentry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11729

The libfsntfsmftentryreadheader function in libfsntfsmftentry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub...

CVE-2018-11727

The libfsntfsattributereadfrommft function in libfsntfsattribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub...

CVE-2018-11724

The vulnerability CVE-2018-11724 affects Libmobi 0.3, specifically the mobi_pk1_decrypt function in encryption.c. A crafted mobi file can trigger a heap-based buffer overflow, allowing remote attackers to cause a denial of service and, per the entry, potentially other unspecified impact. Details ...

CVE-2018-11723

The vulnerability CVE-2018-11723 affects libyal libpff (libpff_name_to_id_map_entry_read in libpff_name_to_id_map.c) through 2018-04-28. It allows a remote attacker to cause information disclosure via a crafted PFF file by triggering a heap-based buffer over-read. Public entries (SUSE, CNVD, OSV,...

CVE-2018-11727

CVE-2018-11727 affects the libfsntfs library: the function libfsntfs_attribute_read_from_mft in libfsntfs_attribute.c (through 2018-04-20) can cause information disclosure via a crafted NTFS file due to a heap-based buffer over-read. This vulnerability is documented across multiple sources (NVD, ...

CVE-2018-11729

Summary (CVE-2018-11729) : The libfsntfs library’s libfsntfs_mft_entry_read_header function (libfsntfs_mft_entry.c), affected up to 2018-04-20, allows a remote attacker to cause information disclosure via a heap-based buffer over-read when processing a crafted NTFS file. This description is consi...

CVE-2018-12098

The vulnerability CVE-2018-12098 affects liblnk up to 2018-04-19, caused by the liblnk_data_block_read() function in liblnk_data_block.c, leading to a heap-based buffer over-read via a crafted .lnk file. Exploitation details are not fully disclosed in the provided documents; vendor dispute is not...

CVE-2018-11731

The CVE-2018-11731 entry involves the libfsntfs library, specifically the libfsntfs_mft_entry_read_attributes function in libfsntfs_mft_entry.c. A heap-based buffer over-read allows information disclosure when processing crafted NTFS files and is claimed to affect libfsntfs through 2018-04-20. Th...

CVE-2018-12097

The liblnklocationinformationreaddata function in liblnklocationinformation.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on...

CVE-2018-11726

The mobidecodefontresource function in util.c in Libmobi 0.3 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted mobi file...