CVE-2018-18454: Out-of-bounds Read

CCITTFaxStream::readRow in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18480: Out-of-bounds Read

A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadMCHAR function in lib/dwg/io.cpp, resulting in an application crash...

CVE-2018-18407

A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay 4.3.0 beta1, during the incremental checksum operation. The issue gets triggered in the function csumreplace4 in incrementalchecksum.h, causing a denial of service...

PT-2018-14443

Name of the Vulnerable Software and Affected Versions Tcpreplay version 4.3.0 beta1 Description A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay, during the incremental checksum operation. The issue gets triggered in the function csum replace4 in incremental...

Heap overflow

An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in RIFF::List::GetListTypeString in RIFF.cpp...

CVE-2018-18196

An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in RIFF::List::GetListTypeString in RIFF.cpp...

CVE-2018-18194

An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in DLS::Region::GetSample in DLS.cpp...

CVE-2018-18194

An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in DLS::Region::GetSample in DLS.cpp...

PT-2018-14356

Name of the Vulnerable Software and Affected Versions libgig version 4.1.0 Description A heap-based buffer over-read issue was discovered in the DLS::Region::GetSample function in DLS.cpp. Recommendations For libgig version 4.1.0, at the moment, there is no information about a newer version that...

CVE-2018-18194: Out-of-bounds Read

An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in DLS::Region::GetSample in DLS.cpp...

CVE-2018-18196: Out-of-bounds Read

An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in RIFF::List::GetListTypeString in RIFF.cpp...

Heap overflow

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file...

CVE-2018-18023

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers to cause a denial of service via a crafted SVG image file...

CVE-2018-18025

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file...

CVE-2018-18025

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file...

CVE-2018-18025

CVE-2018-18025 affects ImageMagick and describes a heap-based buffer over-read in the EncodeImage function of pict.c, enabling denial of service via a crafted SVG. Connected advisories confirm the issue and provide fixes via package updates. For Debian 8 (Jessie), the fix is in 8:6.8.9.9-5+deb8u1...

CVE-2018-18025

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file...

CVE-2018-18025: Out-of-bounds Read

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file...

PT-2018-14323

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.8-13 Q16 Description The issue is related to a heap-based buffer over-read in the SVGStripString function of coders/svg.c. This allows attackers to cause a denial of service via a crafted SVG image file. Recommendations...

CVE-2018-17974

An issue was discovered in Tcpreplay 4.3.0 beta1. A heap-based buffer over-read was triggered in the function dlten10mbencode of the file plugins/dlten10mb/en10mb.c, due to inappropriate values in the function memmove. The length pktlen + ctx - l2len can be larger than source value packet +...