CVE-2018-19543

An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2decode in libjasper/jp2/jp2dec.c...

CVE-2018-19543: Out-of-bounds Read

An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2decode in libjasper/jp2/jp2dec.c...

PT-2018-14988

Name of the Vulnerable Software and Affected Versions JasPer version 2.0.14 Description An issue was discovered in the function jp2 decode in libjasper/jp2/jp2 dec.c, which causes a heap-based buffer over-read of size 8. Recommendations For JasPer version 2.0.14, consider applying a patch or fix ...

CVE-2018-19535

Exiv2 0.26 and earlier are affected by CVE-2018-19535 due to a heap-based buffer over-read in PngChunk::readRawProfile (pngchunk_int.cpp), which can cause a denial of service (application crash) via a crafted PNG file. Connected documents corroborate the CVE entry and list Exiv2-related DoS/crash...

PT-2018-3088

Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.8 through 2.0.16 Description The issue is a heap-based buffer over-read of size 8 in the jas image depalettize function in libjasper/base/jas image.c. This can allow a remote attacker to impact data integrity and...

CVE-2018-19535

In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunkint.cpp may cause a denial of service application crash due to a heap-based buffer over-read via a crafted PNG file...

Debian DLA-1574-1 : imagemagick security update

CVE-2018-18025 Fix for heap-based buffer over-read which can result in a denial of service via a crafted file. For Debian 8 'Jessie', this problem has been fixed in version 8:6.8.9.9-5+deb8u15. We recommend that you upgrade your imagemagick packages. NOTE: Tenable Network Security has extracted t...

CVE-2018-19214

Netwide Assembler NASM 2.14rc15 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for insufficient input...

CVE-2018-19215

Netwide Assembler NASM 2.14rc16 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for the special cases of the % and $ and ! characters...

CVE-2018-19214

Netwide Assembler NASM 2.14rc15 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for insufficient input...

CVE-2018-19214

Netwide Assembler NASM 2.14rc15 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for insufficient input...

CVE-2018-19214: Out-of-bounds Read

Netwide Assembler NASM 2.14rc15 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for insufficient input...

PT-2018-14867

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc15 Description The issue is related to a heap-based buffer over-read in the expand mmac params function located in asm/preproc.c. This occurs due to insufficient input. Recommendations For Netwide Assembler...

CVE-2018-19215: Out-of-bounds Read

Netwide Assembler NASM 2.14rc16 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for the special cases of the % and $ and ! characters...

PT-2018-14868

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc16 Description The issue is related to a heap-based buffer over-read in the expand mmac params function in asm/preproc.c, specifically for the special cases of the % and $ and ! characters. Recommendations...

Security update for libarchive (moderate)

This update for libarchive fixes the following issues: - CVE-2016-10209: The archivewstringappendfrommbs function in archivestring.c allowed remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted archive file. bsc1032089 - CVE-2016-10349: The...

CVE-2018-19128: Out-of-bounds Read

In Libav 12.3, there is a heap-based buffer over-read in decodeframe in libavcodec/lcldec.c that allows an attacker to cause denial-of-service via a crafted avi file...

CVE-2018-19107

In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp called from psdimage.cpp in the PSD image reader may suffer from a denial of service heap-based buffer over-read caused by an integer overflow via a crafted PSD image file...

PT-2018-19197

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to a denial of service caused by an integer overflow, which can lead to a heap-based buffer over-read. This occurs when the Exiv2::IptcParser::decode function in iptc.cpp, called from...

CVE-2018-19107

In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp called from psdimage.cpp in the PSD image reader may suffer from a denial of service heap-based buffer over-read caused by an integer overflow via a crafted PSD image file...