imagemagick/ping_epi_fuzzer: Heap-buffer-overflow in ReadPSInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5753467974451200 Project: imagemagick Fuzzer: libFuzzerimagemagickpingepifuzzer Fuzz target binary: pingepifuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

Intel Patches High-Severity Flaw in Processor Diagnostic Tool

Intel has patched a high-severity vulnerability in its processor diagnostic tool, which could allow local attackers to launch several malicious attacks on affected devices, such as escalation of privilege or denial of service. The Intel Processor Diagnostic tool is a free product that allows user...

Unpatched Prototype Pollution Flaw Affects All Versions of Popular Lodash Library

Lodash, a popular npm library used by more than 4 million projects on GitHub alone, is affected by a high severity security vulnerability that could allow attackers to compromise the security of affected services using the library and their respective user base. Lodash is a JavaScript library tha...

Microsoft File Checksum Verifier 2.05 DLL Hijacking

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-FILE-CHECKSUM-VERIFIER-v2.05-DLL-HIJACKING-ARBITRARY-CODE-EXECUTION.txt + ISR: Apparition Security Vendor www.microsoft.com Product File Checksum Integrity Verifier...

Security Camera Firm Arlo Zaps High-Severity Bugs

Two high-severity vulnerabilities in Arlo Technologies’ wireless home security camera gear have been patched. The flaws, which indirectly impact Arlo’s popular fleet of wireless home security cameras, are limited to adversaries with local network and physical access to Arlo Base Stations. Both...

IBM Patches Critical, High-Severity Flaws in Spectrum Protect

IBM has disclosed critical and high-severity vulnerabilities in Spectrum Protect, Big Blue’s security tool under the umbrella of its Spectrum data storage software branding. The most severe of these flaws could cause a remote attacker to execute arbitrary code on impacted systems. Overall, IBM...

Android July 2019 Security Update Patches 33 New Vulnerabilities

Google has started rolling out this month's security updates for its mobile operating system platform to address a total of 33 new security vulnerabilities affecting Android devices, 9 of which have been rated critical in severity. The vulnerabilities affect various Android components, including...

FDA Warns of Potentially Fatal Flaws in Medtronic Insulin Pumps

The Food and Drug Administration FDA has issued an emergency alert, warning that Medtronic MiniMed insulin pumps are vulnerable to potentially life-threatening cyberattacks. Specifically impacted are Medtronic’s MiniMed insulin pumps, the MiniMed 508 insulin pump and MiniMed Paradigm series insul...

Lenovo Service Bridge Vulnerabilities - Lenovo Support US

No description provided...

Lenovo Service Bridge Vulnerabilities - US

Lenovo Security Advisory: LEN-27725 Potential Impact: Remote code execution Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6166,CVE-2019-6167,CVE-2019-6168, CVE-2019-6169 Summary Description: Vulnerabilities reported in Lenovo Service Bridge could allow remote code...

c-ares/ares_parse_reply_fuzzer: Stack-buffer-overflow in ares_parse_aaaa_reply

Project: https://github.com/c-ares/c-ares.git Detailed report: https://oss-fuzz.com/testcase?key=5683497160671232 Project: c-ares Fuzzer: libFuzzerc-aresaresparsereplyfuzzer Fuzz target binary: aresparsereplyfuzzer Job Type: libfuzzerasanc-ares Platform Id: linux Crash Type: Stack-buffer-overflow...

Mozilla Fixes Second Actively-Exploited Firefox Flaw

UPDATE Mozilla has fixed a high-severity vulnerability in its Firefox browser being actively exploited in the wild. The vulnerability CVE-2019-11708 is separate from a critical flaw under active attack that was patched earlier this week CVE-2019-11707. However, both vulnerabilities were discovere...

libpcap/fuzz_filter: Heap-buffer-overflow in find_dom

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed report: https://oss-fuzz.com/testcase?key=5715482721648640 Project: libpcap Fuzzer: afllibpcapfuzzfilter Fuzz target binary: fuzzfilter Job Type: aflasanlibpcap Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

ffmpeg/ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer: Heap-buffer-overflow in cmap_read_palette

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5727829913763840 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDIFFILBMfuzzer Fuzz target binary: ffmpegAVCODECIDIFFILBMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE...

radare2/ia_fuzz: Heap-buffer-overflow in r_buf_read

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5766040862064640 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

uwebsockets/MockedHelloWorld: Heap-buffer-overflow in helpers.h

Project: https://github.com/uNetworking/uWebSockets.git Detailed report: https://oss-fuzz.com/testcase?key=5756011190681600 Project: uwebsockets Fuzzer: libFuzzeruwebsocketsMockedHelloWorld Fuzz target binary: MockedHelloWorld Job Type: libfuzzerasanuwebsockets Platform Id: linux Crash Type:...

Intel Accelerated Storage Manager in Intel Rapid Storage Technology Enterprise (RSTe) Vulnerabilities - Lenovo Support US

No description provided...

NVIDIA GeForce Experience - May 2019 - Lenovo Support US

Lenovo Security Advisory: LEN-27815 Potential Impact: Privilege escalation, information disclosure, denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-5676, CVE-2019-5678 Summary Description: NVIDIA has released a software update to address potential security...

NVIDIA GeForce Experience - May 2019 - Lenovo Support US

No description provided...

VLC Player Gets Patched for Two High-Severity Bugs

Maintainers of the popular open-source VLC media player patched two high-severity bugs Friday. The flaws were an out-of-bound write vulnerability and a stack-buffer-overflow bug. Developers behind the software, VideoLAN, said the patches were two of 33 fixes being pushed out to the media player a...