CVE-2018-8881

Netwide Assembler NASM 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string...

Heap overflow

In radare2 2.4.0, there is a heap-based buffer over-read in the getivarlistt function of mach0classes.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted Mach-O file...

CVE-2018-8808

In radare2 2.4.0, there is a heap-based buffer over-read in the rasmdisassemble function of asm.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file...

CVE-2018-8809

In radare2 2.4.0, there is a heap-based buffer over-read in the dalvikop function of analdalvik.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file...

CVE-2018-8810

CVE-2018-8810 involves the radare2 project. Multiple connected sources confirm a vulnerability in version 2.4.0 where a heap-based buffer over-read occurs in the get_ivar_list_t function of mach0_classes.c. This flaw could allow remote attackers to cause a denial of service via a specially crafte...

CVE-2018-8808

In radare2 2.4.0, there is a heap-based buffer over-read in the rasmdisassemble function of asm.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file...

CVE-2018-8810

In radare2 2.4.0, there is a heap-based buffer over-read in the getivarlistt function of mach0classes.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted Mach-O file...

CVE-2018-8809

CVE-2018-8809 affects radare2, reported for 2.4.0, featuring a heap-based buffer over-read in the dalvik_op function (anal_dalvik.c). The vulnerability can be exploited by remote attackers to cause a denial of service through a crafted DEX file. Multiple connected sources corroborate the same fla...

CVE-2018-8808

In radare2 2.4.0, there is a heap-based buffer over-read in the rasmdisassemble function of asm.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file...

CVE-2018-8808

In radare2 2.4.0, a heap-based buffer over-read in the r_asm_disassemble function of asm.c can be triggered by processing a crafted dex file, allowing remote attackers to cause a denial of service. Affected component: radare2 (assembly/disassembly). Root cause: heap buffer over-read in r_asm_disa...

CVE-2018-8881: Out-of-bounds Read

Netwide Assembler NASM 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string...

CVE-2018-8810: Out-of-bounds Read

In radare2 2.4.0, there is a heap-based buffer over-read in the getivarlistt function of mach0classes.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted Mach-O file...

PT-2018-18633

Name of the Vulnerable Software and Affected Versions radare2 version 2.4.0 Description The issue is a heap-based buffer over-read in the r asm disassemble function, which can be exploited by remote attackers to cause a denial of service. This can be achieved through a crafted dex file...

PT-2018-18634

Name of the Vulnerable Software and Affected Versions radare2 version 2.4.0 Description The issue is a heap-based buffer over-read in the dalvik op function of anal dalvik.c. This could allow remote attackers to cause a denial of service by providing a crafted dex file. Recommendations For radare...

CVE-2018-8809: Out-of-bounds Read

In radare2 2.4.0, there is a heap-based buffer over-read in the dalvikop function of analdalvik.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file...

PT-2018-18687

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.13.02rc2 Description The issue is related to a heap-based buffer over-read in the tokenize function located in asm/preproc.c, which occurs due to an unterminated string. Recommendations For Netwide Assembler NA...

Heap overflow

The JPXStream::fillReadBuf function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8107

The JPXStream::close function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8105

The JPXStream::fillReadBuf function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

CVE-2018-8103

The JBIG2Stream::readGenericBitmap function in JBIG2Stream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...