PT-2017-14813

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue is related to a heap-based buffer over-read in the ReadCMYKImage function in GraphicsMagick. This occurs via a crafted file, specifically in the magick/import.c ImportCMYKQuantumType...

PT-2017-14814

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue is related to a heap-based buffer over-read in the ReadGRAYImage function in coders/gray.c of GraphicsMagick. This occurs via a crafted file, specifically affecting the ImportGrayQuantumType ...

PT-2017-14811

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue is related to a heap-based buffer over-read in the ReadRGBImage function in coders/rgb.c of GraphicsMagick. This occurs via a crafted file, specifically affecting the ImportRGBQuantumType in...

PT-2017-14812

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue is related to a heap-based buffer over-read in the WriteOnePNGImage function, located in the coders/png.c file of GraphicsMagick. This occurs when processing a crafted file. Recommendations F...

CVE-2017-17503: Out-of-bounds Read

ReadGRAYImage in coders/gray.c in GraphicsMagick 1.3.26 has a magick/import.c ImportGrayQuantumType heap-based buffer over-read via a crafted file...

CVE-2017-17501: Out-of-bounds Read

WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file...

CVE-2017-17500: Out-of-bounds Read

ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file...

CVE-2017-17504: Out-of-bounds Read

ImageMagick before 7.0.7-12 has a coders/png.c Magickpngreadrawprofile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage...

CVE-2017-17502: Out-of-bounds Read

ReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has a magick/import.c ImportCMYKQuantumType heap-based buffer over-read via a crafted file...

PT-2017-14815

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.7-12 Description The issue is related to a heap-based buffer over-read in the coders/png.c file, specifically in the Magick png read raw profile function, which can be triggered by a crafted file. This is also...

Updated memcached packages fix security vulnerability

The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read CVE-2017-9951...

CVE-2017-17080

elf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, does not validate sizes of core notes, which allows remote attackers to cause a denial of service bfdgetl32 heap-based buffer over-read and application crash via a crafted object file, related to...

CVE-2017-17080

elf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, does not validate sizes of core notes, which allows remote attackers to cause a denial of service bfdgetl32 heap-based buffer over-read and application crash via a crafted object file, related to...

CVE-2017-17080

elf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, does not validate sizes of core notes, which allows remote attackers to cause a denial of service bfdgetl32 heap-based buffer over-read and application crash via a crafted object file, related to...

CVE-2017-16828

The displaydebugframes function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service integer overflow and heap-based buffer over-read, and application crash or possibly have unspecified other impact via a crafted ELF file, related to printdebugframe...

CVE-2017-14034

The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impa...

CVE-2017-14034

The CVE-2017-14034 vulnerability affects libavcodec (used in Libbpg 0.9.7 and related products), specifically the restore_tqb_pixels function in hevc_filter.c. It miscalculates a memcpy destination address, enabling a heap-based buffer over-read that can crash the application (denial of service) ...

PT-2017-13214

Name of the Vulnerable Software and Affected Versions libbpg version 0.9.7 Description The issue is related to the restore tqb pixels function in hevc filter.c within libavcodec, which is used in libbpg and other products. This function miscalculates a memcpy destination address, allowing remote...

CVE-2017-14034: Out-of-bounds Read

The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impa...

Integer overflow

The displaydebugframes function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service integer overflow and heap-based buffer over-read, and application crash or possibly have unspecified other impact via a crafted ELF file, related to printdebugframe...