CVE-2017-10995

The mnggetlong function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted MNG image...

CVE-2017-10989: Out-of-bounds Read

The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact...

PT-2017-11669

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-0 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted MNG image. This is due to a problem in the mng get long...

CVE-2017-10976

When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead to a heap-based buffer over-read in the readBlock function in lib/ttf.c...

CVE-2017-10976

When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead to a heap-based buffer over-read in the readBlock function in lib/ttf.c...

PT-2017-11653

Name of the Vulnerable Software and Affected Versions SWFTools version 0.9.2 Description The issue arises when SWFTools processes a crafted file in ttftool, leading to a heap-based buffer over-read in the readBlock function located in lib/ttf.c. Recommendations For SWFTools version 0.9.2, conside...

CVE-2017-10976: Out-of-bounds Read

When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead to a heap-based buffer over-read in the readBlock function in lib/ttf.c...

Denial Of Service (DoS)

FreeType is vulnerable to denial of service DoS attacks and other attacks. The library does not check if a font contains a glyph name, allowing a malicious user to send a font file to cause a heap-based buffer over-read. This can cause the application to crash...

PT-2017-11614

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-0 Description A heap-based buffer over-read in the GetNextToken function allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document...

CVE-2017-10928

In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue...

CVE-2017-10687

In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of service attack...

PT-2017-11439

Name of the Vulnerable Software and Affected Versions LibSass version 3.4.5 Description The issue is related to a heap-based buffer over-read in the json mkstream function in sass context.cpp. This can be triggered by a crafted input, potentially leading to a remote denial of service attack...

PT-2017-11435

Name of the Vulnerable Software and Affected Versions mpg123 version 1.25.0 Description The issue is related to a heap-based buffer over-read in the convert latin1 function, located in libmpg123/id3.c. This can be triggered by a crafted input, potentially leading to a remote denial of service...

CVE-2017-10683: Out-of-bounds Read

In mpg123 1.25.0, there is a heap-based buffer over-read in the convertlatin1 function in libmpg123/id3.c. A crafted input will lead to a remote denial of service attack...

CVE-2017-10687: Out-of-bounds Read

In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of service attack...

CVE-2017-9955

The getbuildid function in opncls.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file in which a certain size field is larger than a...

CVE-2017-9955

The getbuildid function in opncls.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file in which a certain size field is larger than a...

CVE-2017-9955

The getbuildid function in opncls.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file in which a certain size field is larger than a...

Heap overflow

The fillbufferresample function in util.c in libmp3lame.a in LAME 3.98.4, 3.98.2, 3.98, 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4 and 3.99.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

CVE-2015-9101

The fillbufferresample function in util.c in libmp3lame.a in LAME 3.98.4, 3.98.2, 3.98, 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4 and 3.99.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...