CVE-2017-9054

An issue, also known as DW201703-002, was discovered in libdwarf 2017-03-21. In dwarfdecodesleb128chk a byte pointer was dereferenced just before it was checked for being in bounds, leading to a heap-based buffer over-read...

PT-2017-2804

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is related to the camera application, which can request frame/command buffer processing with invalid values. This lea...

PT-2017-17972

Name of the Vulnerable Software and Affected Versions Artifex jbig2dec version 0.13 Description The issue is related to a heap-based buffer over-read that can cause a denial of service, resulting in an application crash, or potentially disclose sensitive information from process memory. This occu...

CVE-2017-6960

An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the loadapng function and the imagesize variable...

CVE-2016-9480

libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affecting the dwarfutil.c component, aka DW201611-006...

CVE-2016-9480

libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affecting the dwarfutil.c component, aka DW201611-006...

CVE-2016-9480

libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affecting the dwarfutil.c component, aka DW201611-006...

CVE-2016-9480

libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affecting the dwarfutil.c component, aka DW201611-006...

CVE-2016-9480

libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affecting the dwarfutil.c component, aka DW201611-006...

CVE-2016-9480

CVE-2016-9480 affects libdwarf, specifically the dwarf_util.c path, where a heap-based over-read vulnerability in a malformed DWARF file can lead to information disclosure or a denial of service. The issue is described as a Heap Buffer Over-read (DW201611-006) and is referenced in upstream adviso...

CVE-2016-9480

libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affecting the dwarfutil.c component, aka DW201611-006...

CVE-2016-9480: Improper Restriction of Operations within the Bounds of a Memory Buffer

libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affecting the dwarfutil.c component, aka DW201611-006...

PT-2016-7765

Name of the Vulnerable Software and Affected Versions libdwarf version 2016-10-21 Description The issue allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affectin...

CVE-2016-9115

Heap Buffer Over-read in function imagetotga of convert.cjp2:942 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file...

CVE-2016-9115

Heap Buffer Over-read in function imagetotga of convert.cjp2:942 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file...

CVE-2016-9115

Heap Buffer Over-read in function imagetotga of convert.cjp2:942 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file...

CVE-2016-9115

Heap Buffer Over-read in function imagetotga of convert.cjp2:942 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file...

CVE-2016-9115: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap Buffer Over-read in function imagetotga of convert.cjp2:942 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file...

PT-2016-7659

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.1.2 Description The issue is related to a Heap Buffer Over-read in the imagetotga function of convert.cjp2 at line 942. This can lead to a Denial of Service when a crafted j2k file is opened. Recommendations For OpenJPEG...

SUSE SLES11 Security Update : PHP5 (SUSE-SU-2014:0064-1)

This update fixes the following issues : - memory corruption in opensslparsex509 CVE-2013-6420 - Heap buffer over-read in DateInterval CVE-2013-6712 - man-in-the-middle attacks by specially crafting certificates CVE-2013-4248 Note that Tenable Network Security has extracted the preceding...