CVE-2017-7206

The CVE-2017-7206 issue affects libavcodec (libav) 9.21, specifically the ff_h2645_extract_rbsp function. A crafted H.264 video file can trigger a heap-based buffer over-read, leading to a denial of service and potential leakage of memory content. Documented impact scores in NVD show CVSS-2/3 bas...

CVE-2017-7210: Improper Restriction of Operations within the Bounds of a Memory Buffer

objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads of size 1 and size 8 while handling corrupt STABS enum type strings in a crafted object file, leading to program crash...

CVE-2017-6969

readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well...

CVE-2017-6969

readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well...

CVE-2017-6960

An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the loadapng function and the imagesize variable...

CVE-2017-6969

readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well...

CVE-2017-6969

CVE-2017-6969 affects readelf in GNU Binutils 2.28, describing a heap-based buffer over-read when processing corrupt RL78 binaries. Impact per sources: crashes and potential information leakage. Connected advisories (e.g., RH unpatched BINUTILS entries) list CVE-2017-6969 among vulnerabilities wi...

CVE-2017-6960

CVE-2017-6960 affects apng2gif. The issue is an integer overflow in the load_apng path that causes a heap-based buffer over-read. Public advisories (Debian/Ubuntu) report this with fixes in newer package versions: Debian patching to 1.8-0.1~deb9u1 (DLA-2911) and Ubuntu USN-4513-1; OpenVAS/OSV ent...

CVE-2017-6960

An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the loadapng function and the imagesize variable...

CVE-2017-6960: Integer Overflow or Wraparound

An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the loadapng function and the imagesize variable...

CVE-2017-6969: Out-of-bounds Read

readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well...

CVE-2017-6802

An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF in libytnef...

CVE-2017-6800

CVE-2017-6800 affects ytnef with libytnef up to version 1.9.1, where handling of LONG data types may trigger a heap-based buffer over-read in MAPIPrint() inside libytnef. Multiple advisories (Mageia MGASA-2017-0174, Ubuntu USN-4615-1, Fedora FEDORA-2019-7d7083b8be, OSV entries) document the same ...

CVE-2017-6802

An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF in libytnef...

CVE-2017-6800

An issue was discovered in ytnef before 1.9.2. An invalid memory access heap-based buffer over-read can occur during handling of LONG data types, related to MAPIPrint in libytnef...

CVE-2017-6802

An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF in libytnef...

CVE-2017-6802: Out-of-bounds Read

An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF in libytnef...

CVE-2017-6800: Out-of-bounds Read

An issue was discovered in ytnef before 1.9.2. An invalid memory access heap-based buffer over-read can occur during handling of LONG data types, related to MAPIPrint in libytnef...

CVE-2017-6500

An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read...

CVE-2016-10244

The parsecharstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted file...