3178 matches found
Heap-Based Buffer Over-read
TinyXML2 is vulnerable to heap-based buffer over-read. The vulnerability can be triggered when the attacker parses a malicious data to XMLDocument::Parse function...
CVE-2018-11099: Out-of-bounds Read
The header::addINFOdescriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted vcf file...
CVE-2018-11210
TinyXML2 6.2.0 is affected by a heap-based buffer over-read in XMLDocument::Parse (libtinyxml2.so). The CVE-2018-11210 entry notes this is due to improper use of the library and not a vulnerability in tinyxml2. NVD data lists a high/severe impact (CVSS v3: 9.8, NETWORK/NO AUTH required; all impac...
PT-2018-3438
Name of the Vulnerable Software and Affected Versions: VCFtools version 0.1.15 Description: The issue is related to a heap-based buffer over-read in the header::add INFO descriptor function, which can lead to information disclosure. This can be exploited by remote attackers using a crafted vcf...
CVE-2018-11210: Out-of-bounds Read
TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...
Denial Of Service (DoS)
libexiv2.so is vulnerable to denial of service DoS. An attacker can make a Exiv2::Internal::PngChunk::parseTXTChunk call to trigger a heap-based buffer over-read...
FreeBSD : wavpack -- multiple vulnerabilities (50210bc1-54ef-11e8-95d9-9c5c8e75236a)
Sebastian Ramacher reports : A stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service attack or possibly have unspecified other impact via a maliciously crafted RF64 file. The...
CVE-2018-10999
An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read...
CVE-2018-10999
An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read...
CVE-2018-10999: Out-of-bounds Read
An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read...
PT-2018-3146
Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description An issue in the Exiv2 library is related to a heap-based buffer over-read in the Exiv2::Internal::PngChunk::parseTXTChunk function. This could potentially allow a remote attacker to cause a denial of service...
SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:1178-1)
This update for ImageMagick fixes the following issues : - CVE-2017-14325: In ImageMagick, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allowed attackers to cause a denial of service memory consumption in ReadMPCImage in coders/mpc.c via a craft...
Heap overflow
TIFFWriteScanline in tifwrite.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff...
CVE-2018-10780
Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read...
CVE-2018-10779
TIFFWriteScanline in tifwrite.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff...
CVE-2018-10779
TIFFWriteScanline in tifwrite.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff...
CVE-2018-10780
Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read...
CVE-2018-10780: Out-of-bounds Read
Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read...