CVE-2018-8809

In radare2 2.4.0, there is a heap-based buffer over-read in the dalvikop function of analdalvik.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file...

Heap overflow

In radare2 2.4.0, there is a heap-based buffer over-read in the getivarlistt function of mach0classes.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted Mach-O file...

CVE-2018-8809

In radare2 2.4.0, there is a heap-based buffer over-read in the dalvikop function of analdalvik.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file...

CVE-2018-8808

In radare2 2.4.0, there is a heap-based buffer over-read in the rasmdisassemble function of asm.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file...

CVE-2018-8808

In radare2 2.4.0, there is a heap-based buffer over-read in the rasmdisassemble function of asm.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file...

CVE-2018-8809

CVE-2018-8809 affects radare2, reported for 2.4.0, featuring a heap-based buffer over-read in the dalvik_op function (anal_dalvik.c). The vulnerability can be exploited by remote attackers to cause a denial of service through a crafted DEX file. Multiple connected sources corroborate the same fla...

CVE-2018-8810

CVE-2018-8810 involves the radare2 project. Multiple connected sources confirm a vulnerability in version 2.4.0 where a heap-based buffer over-read occurs in the get_ivar_list_t function of mach0_classes.c. This flaw could allow remote attackers to cause a denial of service via a specially crafte...

CVE-2018-8810

In radare2 2.4.0, there is a heap-based buffer over-read in the getivarlistt function of mach0classes.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted Mach-O file...

CVE-2018-8808

In radare2 2.4.0, a heap-based buffer over-read in the r_asm_disassemble function of asm.c can be triggered by processing a crafted dex file, allowing remote attackers to cause a denial of service. Affected component: radare2 (assembly/disassembly). Root cause: heap buffer over-read in r_asm_disa...

CVE-2018-8881

Netwide Assembler NASM 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string...

openSUSE Security Update : libraw (openSUSE-2018-281)

This update for libraw fixes the following issues : - CVE-2018-5800: Specially crafted RAW files may have caused an application crash via a heap-based buffer overflow boo1084690 - CVE-2018-5801: Specially crafted RAW files may have been used to trigger a NULL pointer de-reference boo1084691 -...

CVE-2018-8106

The JPXStream::readTilePartData function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8105

The JPXStream::fillReadBuf function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8107

The JPXStream::close function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8100

The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8101

The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8107

The JPXStream::close function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8100

The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8104

The BufStream::lookChar function in Stream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

Heap overflow

The JPXStream::fillReadBuf function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...