CVE-2019-20200

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing crafted a XML file, performs incorrect memory handling, leading to a heap-based buffer over-read in the "normalize line endings" feature...

NewStart CGSL CORE 5.05 / MAIN 5.05 : exempi Multiple Vulnerabilities (NS-SA-2019-0228)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has exempi packages installed that are affected by multiple vulnerabilities: - An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service invalid memcpy with resultant use-after-free...

CVE-2019-20200: Out-of-bounds Read

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing crafted a XML file, performs incorrect memory handling, leading to a heap-based buffer over-read in the "normalize line endings" feature...

NewStart CGSL CORE 5.05 / MAIN 5.05 : libjpeg-turbo Multiple Vulnerabilities (NS-SA-2019-0227)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has libjpeg-turbo packages installed that are affected by multiple vulnerabilities: - The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute...

NewStart CGSL CORE 5.05 / MAIN 5.05 : poppler Multiple Vulnerabilities (NS-SA-2019-0249)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has poppler packages installed that are affected by multiple vulnerabilities: - Poppler before 0.70.0 has a NULL pointer dereference in popplerattachmentnew when called from popplerannotfileattachmentgetattachment. CVE-2018-191...

Heap overflow

GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GetPayload in GPMFmp4reader.c...

Heap overflow

GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMFNext in GPMFparser.c...

CVE-2019-20086

GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMFNext in GPMFparser.c...

CVE-2019-20087

GoPro GPMF-parser 1.2.3 is affected by a heap-based buffer over-read in GPMF_seekToSamples (GPMF-parse.c) related to the "matching tags" feature. The issue is reported across multiple sources (NVD, Red Hat, OSV, CVE lists) and is tied to CVE-2019-20087. The vulnerability description consistently ...

CVE-2019-20089

Affected software: GoPro GPMF-parser 1.2.3. Issue: a heap-based buffer over-read in GPMF_SeekToSamples within GPMF_parse.c used for size calculation. Root cause per description: reading beyond allocated memory boundaries, enabling an out-of-bounds read. Impact described in the sources as a heap/b...

PT-2019-16084

Name of the Vulnerable Software and Affected Versions GoPro GPMF-parser version 1.2.3 Description The issue is related to a heap-based buffer over-read in the GPMF seekToSamples function, located in GPMF-parse.c, which is part of the "matching tags" feature. Recommendations For GoPro GPMF-parser...

PT-2019-16083

Name of the Vulnerable Software and Affected Versions GoPro GPMF-parser version 1.2.3 Description The issue is related to a heap-based buffer over-read in the GPMF Next function located in GPMF parser.c. Recommendations For GoPro GPMF-parser version 1.2.3, consider applying a patch or fix that...

PT-2019-16085

Name of the Vulnerable Software and Affected Versions GoPro GPMF-parser version 1.2.3 Description The issue is related to a heap-based buffer over-read in the GetPayload function located in the GPMF mp4reader.c file. Recommendations For GoPro GPMF-parser version 1.2.3, update to a newer version...

PT-2019-16086

Name of the Vulnerable Software and Affected Versions GoPro GPMF-parser version 1.2.3 Description The issue is related to a heap-based buffer over-read in the GPMF SeekToSamples function within GPMF parse.c, specifically affecting the size calculation. Recommendations For GoPro GPMF-parser versio...

PT-2019-6371

Name of the Vulnerable Software and Affected Versions ezXML versions 0.8.3 through 0.8.6 Description The issue is related to the ezxml decode function in the ezXML library, which performs incorrect memory handling while parsing crafted XML files. This leads to a heap-based buffer over-read in the...

CVE-2019-20089: Out-of-bounds Read

GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMFSeekToSamples in GPMFparse.c for the size calculation...

CVE-2019-20086: Out-of-bounds Read

GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMFNext in GPMFparser.c...

CVE-2019-20088: Out-of-bounds Read

GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GetPayload in GPMFmp4reader.c...

CVE-2019-20087: Out-of-bounds Read

GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMFseekToSamples in GPMF-parse.c for the "matching tags" feature...

CVE-2019-15903

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XMLGetCurrentLineNumber or XMLGetCurrentColumnNumber then resulted in a heap-based buffer over-read. Mitigation Mitigation for this issue is either...