60 matches found
SUSE CVE-2017-12100
An exploitable integer overflow exists in the 'multiresloadolddm' functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...
SUSE CVE-2019-11039
Function iconvmimedecodeheaders in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash...
httpd: Out-of-bounds read in ap_strcmp_match()
An out-of-bounds read vulnerability was found in httpd. A very large input to the apstrcmpmatch function can lead to an integer overflow and result in an out-of-bounds read...
Pixman 输入验证错误漏洞
Pixman is an open source and software library written in C for pixel manipulation that provides image compositing, image rasterization, and other functions. A security vulnerability exists in Pixman libpixman prior to version 0.42.2, which stems from an integer overflow in pixmansamplefloory and ...
Vulnerability of the prealloc_elems_and_frealist function (kernel/bpf/stackmap.c) in the Linux operating system’s kernel, which allows an attacker to access confidential information or cause a service failure
The vulnerability of the preallocelemsandfrealist function kernel/bpf/stackmap.c in the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability could allow an attacker to access confidential information or cause service failures...
mariadb: Integer overflow in sql_lex.cc integer leading to crash
An integer overflow vulnerability was found in MariaDB, where an invalid size of refpointerarray is allocated. This issue results in a denial of service...
DEBIAN-CVE-2021-38090
Integer Overflow vulnerability in function filter16roberts in libavfilter/vfconvolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts...
CentOS 8 : redis:6 (CESA-2021:2034)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2034 advisory. - redis: Integer overflow via STRALGO LCS command CVE-2021-29477 Note that Nessus has not tested for this issue but has instead relied only on the application's...
GHSA-6J9C-GRC6-5M6G CHECK-fail in SparseConcat
Impact An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.SparseConcat: python import tensorflow as tf import numpy as np indices1 = tf.constant514, 514, 514, 514, dtype=tf.int64 indices2 = tf.constant514, 530, 599, 877, dtype=tf.int64 indices = indices1, indices2 values1 =...
The vulnerability of the exif_data_load_data_content function in the Android operating system, which allows a hacker to trigger a service failure
The vulnerability of the exifdataloaddatacontent function in the Android operating system is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the _TIFFCheckMalloc and _TIFFCheckRealloc functions in the LibTIFF library, which allows a hacker to trigger a service failure.
The vulnerabilities of the TIFFCheckMalloc and TIFFCheckRealloc functions tifaux.c in the LibTIFF library are due to integer overflow. Exploiting these vulnerabilities can allow a malicious actor, operating remotely, to cause service failures...
OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
UBUNTU-CVE-2019-9959
The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo...
The vulnerability of the “process_bitmap_updates” function implementation in the RDP client rdesktop software arises from integer overflow, which leads to writing beyond the boundaries of the function. This allows attackers to execute arbitrary code.
The vulnerability of the “processbitmapupdates” function in the RDP client rdesktop implementation is related to integer overflow, which leads to writing beyond the bounds of the function’s capacity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
AZL-7167 CVE-2019-9210 affecting package advancecomp for versions less than 2.1-14
In AdvanceCOMP 2.1, pngcompress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. There is also a heap-based buffer over-read...
The vulnerability of the alarm_timer_nsleep function (kernel/time/alarmtimer.c) in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the alarmtimernsleep function kernel/time/alarmtimer.c in the Linux operating system is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
Integer overflow
Integer overflow in the jsregcomp function in regexp.c in Artifex Software, Inc. MuJS before commit b6de34ac6d8bb7dd5461c57940acfbd3ee7fd93e allows attackers to cause a denial of service application crash via a crafted regular expression...
Debian DSA-2865-1 : postgresql-9.1 - several vulnerabilities
Various vulnerabilities were discovered in PostgreSQL : - CVE-2014-0060 Shore up GRANT ... WITH ADMIN OPTION restrictions Noah Misch Granting a role without ADMIN OPTION is supposed to prevent the grantee from adding or removing members from the granted role, but this restriction was easily...
freetype: integer overflow vulnerability in smooth/ftgrays.c
Integer overflow in the grayrenderspan function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...
