PT-2018-12766

Name of the Vulnerable Software and Affected Versions bcmdhd4358 Wi-Fi driver affected versions not specified Description A buffer overflow issue exists in the dhd bus flow ring flush response function within the dhd pcie.c file of the bcmdhd4358 Wi-Fi driver. This issue can be exploited by an...

CVE-2018-14855: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in dhdbusflowringflushresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory accesses. The Samsung ID is...

CVE-2018-14856: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in dhdbusflowringcreateresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory...

DEBIAN-CVE-2018-19890

An invalid memory address dereference was discovered in the huffcode function libfaac/huff2.c in Freeware Advanced Audio Coder FAAC 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 2 case...

CVE-2018-19130

In Libav 12.3, there is an invalid memory access in vc1decodeframe in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127...

CVE-2018-19130

In Libav 12.3, there is an invalid memory access in vc1decodeframe in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127...

CVE-2018-19130

CVE-2018-19130 corresponds to an invalid memory access in Libav 12.3’s vc1_decode_frame function (libavcodec/vc1dec.c) that can cause denial-of-service via a crafted AAC file. Connected sources (e.g., Debian DLA-2021-1 and CNVD CNVD-2019-09086) identify CVE-2018-19130 as a duplicate of CVE-2017-1...

SUSE-SU-2018:3170-1 Security update for binutils

This update for binutils to version 2.31 fixes the following issues: These security issues were fixed: - CVE-2017-15996: readelf allowed remote attackers to cause a denial of service excessive memory allocation or possibly have unspecified other impact via a crafted ELF file that triggered a buff...

CVE-2018-15378

A vulnerability in ClamAV versions prior to 0.100.2 could allow an attacker to cause a denial of service DoS condition. The vulnerability is due to an error related to the MEW unpacker within the "unmew11" function libclamav/mew.c, which can be exploited to trigger an invalid read memory access v...

GNU Binutils Invalid Memory Access Vulnerability

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. An invalid memory access vulnerability exists in bfdzalloc in opncls.c in the Binary File Descriptor BFD library used in GNU Binutils 2.31. An...

CVE-2018-17359

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.31. An invalid memory access exists in bfdzalloc in opncls.c. Attackers could leverage this vulnerability to cause a denial of service application crash via a crafted ELF file...

UBUNTU-CVE-2018-17358

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.31. An invalid memory access exists in bfdstabsectionfindnearestline in syms.c. Attackers could leverage this vulnerability to cause a denial of service application crash via a crafted E...

CVE-2018-17358

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.31. An invalid memory access exists in bfdstabsectionfindnearestline in syms.c. Attackers could leverage this vulnerability to cause a denial of service application crash via a crafted E...

PT-2018-3958

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.31 Description An issue exists in the Binary File Descriptor BFD library, specifically in the bfd zalloc function within the opncls.c component. This issue is related to an invalid memory access, which can be exploited b...

PT-2018-10887

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue occurs when requesting RSSI timeout in the Linux kernel used by Android releases, potentially leading to access of invalid memory. This happens because the local variable...

PT-2018-10879

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns a possibility of invalid memory access while processing a driver command in the WLAN function. This affects Android releases, including Android for MSM, Firefox OS for...

CVE-2018-11878: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, possibility of invalid memory access while processing driver command in WLAN function...

Lizard Denial of Service Vulnerability (CNVD-2019-07131)

Lizard formerly known as LZ5 is a lossless compression software package. A security vulnerability exists in the 'LZ5compresscontinue' function of the lz5compress.c file in version 2.0 of Lizard, which stems from the program using an invalid memory address. An attacker could exploit this...

Invalid Memory Address Dereference Vulnerability in libming 'decompileGETVARIABLE' Function

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A security vulnerability exists in the 'decompileGETVARIABLE' function in libming 0.4.8 version 0.4.8 prior to 2018-03-12, which stems from a...

Huawei Products Invalid Memory Access Vulnerability (huawei-sa-20180425-02-buffer)

Multiple Huawei Switches are prone to an invalid memory access vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...