PT-2018-18430

Name of the Vulnerable Software and Affected Versions: xpdf version 4.00 Description: The issue allows attackers to launch a denial of service via a specific pdf file, resulting in a heap-based buffer over-read and application crash. This can be achieved by exploiting the...

PT-2018-3699

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-26 Q16 Description The issue is related to the ReadTIFFImage function in coders/tiff.c, which does not properly restrict memory allocation. This leads to a heap-based buffer over-read, potentially allowing a remote...

CVE-2018-8001

In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName in PdfName.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

CVE-2018-8001

CVE-2018-8001 affects PoDoFo 0.9.5 where UnescapeName() in PdfName.cpp contains a heap-based buffer over-read, enabling remote attackers to trigger a denial-of-service through a crafted PDF. Public advisories (openSUSE/SUSE) document fixes in PoDoFo 0.9.6 and later, and list CVE-2018-8001 among m...

CVE-2018-8001

In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName in PdfName.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

CVE-2018-8001: Out-of-bounds Read

In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName in PdfName.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

CVE-2018-7875

There is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack...

CVE-2018-7871

CVE-2018-7871 corresponds to a heap-based buffer over-read in libming 0.4.8. Specifically, the getName function in util/decompile.c handles CONSTANT16 data and, under crafted input, can cause a denial of service (and potentially other impacts) due to memory over-reads. The connected advisories co...

PT-2018-18295

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: The issue is related to a heap-based buffer over-read in the getName function of util/decompile.c for CONSTANT8 data. This can be triggered by a crafted input, potentially leading to a denial of service...

PT-2018-18302

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: The issue is related to a heap-based buffer over-read in the getString function of util/decompile.c for CONSTANT8 data. This can be triggered by a crafted input, leading to a denial of service attack...

CVE-2018-7871: Out-of-bounds Read

There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data. A crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7875: Out-of-bounds Read

There is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack...

Important: GraphicsMagick

Issue Overview: Memory information disclosure in DescribeImage function in magick/describe.c GraphicsMagick is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c file, because of a heap-based buffer over-read. The portion of th...

CVE-2018-7728

An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFFHandler.cpp mishandles a case of a zero length, leading to a heap-based buffer over-read in the MD5Update function in third-party/zuid/interfaces/MD5.cpp...

CVE-2018-7730

An issue was discovered in Exempi through 2.4.4. A certain case of a 0xffffffff length is mishandled in XMPFiles/source/FormatSupport/PSIRFileWriter.cpp, leading to a heap-based buffer over-read in the PSDMetaHandler::CacheFileData function...

CVE-2018-7728

An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFFHandler.cpp mishandles a case of a zero length, leading to a heap-based buffer over-read in the MD5Update function in third-party/zuid/interfaces/MD5.cpp...

CVE-2018-7730

An issue was discovered in Exempi through 2.4.4. A certain case of a 0xffffffff length is mishandled in XMPFiles/source/FormatSupport/PSIRFileWriter.cpp, leading to a heap-based buffer over-read in the PSDMetaHandler::CacheFileData function...

CVE-2018-7728

CVE-2018-7728 affects Exempi up to version 2.4.4, where TIFF_Handler.cpp mishandles a zero-length case, causing a heap-based buffer over-read in MD5Update(). The issue is fixed in Exempi 2.4.5 (Fedora 28) and incorporated in various vendor advisories (e.g., SUSE SUSE-SU-2018:3389-1; EulerOS advis...

CVE-2018-7728

An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFFHandler.cpp mishandles a case of a zero length, leading to a heap-based buffer over-read in the MD5Update function in third-party/zuid/interfaces/MD5.cpp...

CVE-2018-7730: Out-of-bounds Read

An issue was discovered in Exempi through 2.4.4. A certain case of a 0xffffffff length is mishandled in XMPFiles/source/FormatSupport/PSIRFileWriter.cpp, leading to a heap-based buffer over-read in the PSDMetaHandler::CacheFileData function...