3178 matches found
PT-2018-10587
Name of the Vulnerable Software and Affected Versions DISCOUNT version 2.2.3a Description The issue allows remote attackers to cause a denial of service, specifically a heap-based buffer over-read, via a crafted file. This is demonstrated by the mkd2html function. Recommendations For version...
CVE-2018-11418
CVE-2018-11418 affects JerryScript 1.0. There is a heap-based buffer over-read in the function lit_read_code_unit_from_utf8, triggered by a RegExp("[\u0020") payload and related to re_parse_char_class in parser/regexp/re-parser.c. The issue is described across multiple sources as a vulnerability ...
CVE-2018-11418
An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromutf8 function via a RegExp"\u0020" payload, related to reparsecharclass in parser/regexp/re-parser.c...
CVE-2018-11419
CVE-2018-11419 affects JerryScript 1.0, with a heap-based buffer over-read in lit_read_code_unit_from_hex triggered by a RegExp("[\u0") payload and related to re_parse_char_class in parser/regexp/re-parser.c. The vulnerability details are documented across multiple sources in the connected set an...
CVE-2018-11419
An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromhex function via a RegExp"\u0" payload, related to reparsecharclass in parser/regexp/re-parser.c...
CVE-2018-11419
Removed by vendor...
PT-2018-10560
Name of the Vulnerable Software and Affected Versions JerryScript version 1.0 Description An issue was discovered in JerryScript, where a heap-based buffer over-read occurs in the lit read code unit from utf8 function. This is related to the re parse char class function in re-parser.c and can be...
PT-2018-10561
Name of the Vulnerable Software and Affected Versions JerryScript version 1.0 Description An issue was discovered in the lit read code unit from hex function, which is related to the re parse char class in parser/regexp/re-parser.c. This issue involves a heap-based buffer over-read via a RegExp"u...
CVE-2018-11363
jpegsize in pdfgen.c in PDFGen before 2018-04-09 has a heap-based buffer over-read...
CVE-2018-11363: Out-of-bounds Read
jpegsize in pdfgen.c in PDFGen before 2018-04-09 has a heap-based buffer over-read...
PT-2018-10522
Name of the Vulnerable Software and Affected Versions PDFGen versions prior to 2018-04-09 Description The issue is related to a heap-based buffer over-read in the jpeg size function within pdfgen.c in PDFGen. Recommendations For versions prior to 2018-04-09, update to a version released after...
CVE-2018-11251
In ImageMagick 7.0.7-23 Q16 x8664 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service application crash in SetGrayscaleImage in MagickCore/quantize.c via a crafted SUN image file...
CVE-2018-11251: Out-of-bounds Read
In ImageMagick 7.0.7-23 Q16 x8664 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service application crash in SetGrayscaleImage in MagickCore/quantize.c via a crafted SUN image file...
PT-2018-1884
Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.7-23 Description The issue is related to incorrect memory handling in the console graphics editor. It may allow a remote attacker to cause a denial of service or execute arbitrary code by exploiting a heap-based buffer...
CVE-2018-11099
The header::addINFOdescriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted vcf file...
CVE-2018-11099
The header::addINFOdescriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted vcf file...
CVE-2018-11099
The header::addINFOdescriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted vcf file...
CVE-2018-11099
The header::addINFOdescriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted vcf file...
