Integer overflow

In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall handler...

Integer overflow

In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image...

CVE-2016-10340

In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall handler...

CVE-2016-10340

CVE-2016-10340 affects CAF Android releases that use the Linux kernel, with an issue described as an integer underflow in a syscall handler that leads to a buffer overflow. The documents provided confirm the vulnerability description but do not give specific product/vendor versions, affected kern...

CVE-2017-7367

CVE-2017-7367 concerns an integer underflow in the boot image processing path on Android CAF builds using the Linux kernel. The available connected documents identify this as a DoS-type issue (bootloader component) with a high-severity impact profile. The exact affected products, versions, and fi...

CVE-2017-7367

In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image...

PT-2017-2251

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is caused by an integer underflow in the system call handler of the Android operating system, leading to a buffer overflow. This could allow a remote attacker to cause a denial ...

CVE-2016-10340: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall handler...

CVE-2017-7367: Integer Underflow (Wrap or Wraparound)

In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image...

PT-2017-2321

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is caused by an integer underflow in the boot image processing service of the Android operating system. This can be exploited by a remote attacker to cause the device to crash a...

Debian DLA-962-1 : tnef security update

CVE-2017-8911 An integer underflow has been identified in the unicodetoutf8 function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker. For Debian 7 'Wheezy', these problems have been fixed in version 1.4.9-1+deb7u3. We recommend that you upgrade your tnef...

[SECURITY] [DLA 962-1] tnef security update

Package : tnef Version : 1.4.9-1+deb7u3 CVE ID : CVE-2017-8911 CVE-2017-8911 An integer underflow has been identified in the unicodetoutf8 function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker. For Debian 7 "Wheezy", these problems have been fixed in...

CVE-2016-10377

In Open vSwitch OvS 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in "lib/flow.c" in the function "miniflowextract", permitting remote bypass of the access control list enforced by the switch...

CVE-2016-10377: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Open vSwitch OvS 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in lib/flow.c in the function miniflowextract, permitting remote bypass of the access control list enforced by the switch...

PT-2017-7891

Name of the Vulnerable Software and Affected Versions Open vSwitch version 2.5.0 Description A malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in the function miniflow extract in lib/flow.c, permitting remote bypass of the...

CVE-2017-2819

An exploitable heap-based buffer overflow exists in the Hangul Word Processor component version 9.6.1.4350 of Hancom Thinkfree Office NEO 9.6.1.4902. A specially crafted document stream can cause an integer underflow resulting in a buffer overflow which can lead to code execution under the contex...

CVE-2017-2819

An exploitable heap-based buffer overflow exists in the Hangul Word Processor component version 9.6.1.4350 of Hancom Thinkfree Office NEO 9.6.1.4902. A specially crafted document stream can cause an integer underflow resulting in a buffer overflow which can lead to code execution under the contex...

CVE-2017-2819: Improper Restriction of Operations within the Bounds of a Memory Buffer

An exploitable heap-based buffer overflow exists in the Hangul Word Processor component version 9.6.1.4350 of Hancom Thinkfree Office NEO 9.6.1.4902. A specially crafted document stream can cause an integer underflow resulting in a buffer overflow which can lead to code execution under the contex...

PT-2017-15557

Name of the Vulnerable Software and Affected Versions Hancom Thinkfree Office NEO version 9.6.1.4902 Description A heap-based buffer overflow issue exists in the Hangul Word Processor component. This can be triggered by a specially crafted document stream, causing an integer underflow that result...

Integer overflow

In Open vSwitch OvS 2.7.0, while parsing an OFPTQUEUEGETCONFIGREPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function ofputilpullqueuegetconfigreply10 in lib/ofp-util.c...