CVE-2018-5869: Improper Input Validation

Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 800, SD 810...

UBUNTU-CVE-2018-20359

An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbrdec.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

DEBIAN-CVE-2018-20358

An invalid memory address dereference was discovered in the ltprediction function of libfaad/ltpredict.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

Samsung Galaxy S6 bcmdhd4358 Wi-Fi driver buffer overflow vulnerability (CNVD-2018-25872)

Samsung Galaxy S6 is a smartphone released by the South Korean company Samsung Samsung. bcmdhd4358 Wi-Fi driver is one of the Wi-Fi drivers. The bcmdhd4358 Wi-Fi driver in the Samsung Galaxy S6 SM-G920F with firmware version G920FXXU5EQH7 has a 'dhd' in the file...

CVE-2018-14854

Buffer overflow in dhdbusflowringdeleteresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory...

PT-2018-12766

Name of the Vulnerable Software and Affected Versions bcmdhd4358 Wi-Fi driver affected versions not specified Description A buffer overflow issue exists in the dhd bus flow ring flush response function within the dhd pcie.c file of the bcmdhd4358 Wi-Fi driver. This issue can be exploited by an...

CVE-2018-14855: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in dhdbusflowringflushresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory accesses. The Samsung ID is...

PT-2018-12767

Name of the Vulnerable Software and Affected Versions bcmdhd4358 Wi-Fi driver affected versions not specified Description The issue is related to a buffer overflow in the dhd bus flow ring create response function in the dhd pcie.c file of the bcmdhd4358 Wi-Fi driver. This can allow an attacker w...

CVE-2018-14854: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in dhdbusflowringdeleteresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory...

CVE-2018-14856: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in dhdbusflowringcreateresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory...

DEBIAN-CVE-2018-19890

An invalid memory address dereference was discovered in the huffcode function libfaac/huff2.c in Freeware Advanced Audio Coder FAAC 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 2 case...

CVE-2018-19130

In Libav 12.3, there is an invalid memory access in vc1decodeframe in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127...

CVE-2018-19130

In Libav 12.3, there is an invalid memory access in vc1decodeframe in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127...

CVE-2018-19130

CVE-2018-19130 corresponds to an invalid memory access in Libav 12.3’s vc1_decode_frame function (libavcodec/vc1dec.c) that can cause denial-of-service via a crafted AAC file. Connected sources (e.g., Debian DLA-2021-1 and CNVD CNVD-2019-09086) identify CVE-2018-19130 as a duplicate of CVE-2017-1...

SUSE-SU-2018:3170-1 Security update for binutils

This update for binutils to version 2.31 fixes the following issues: These security issues were fixed: - CVE-2017-15996: readelf allowed remote attackers to cause a denial of service excessive memory allocation or possibly have unspecified other impact via a crafted ELF file that triggered a buff...

GNU Binutils Invalid Memory Access Vulnerability

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. An invalid memory access vulnerability exists in bfdzalloc in opncls.c in the Binary File Descriptor BFD library used in GNU Binutils 2.31. An...

CVE-2018-17359

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.31. An invalid memory access exists in bfdzalloc in opncls.c. Attackers could leverage this vulnerability to cause a denial of service application crash via a crafted ELF file...

UBUNTU-CVE-2018-17358

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.31. An invalid memory access exists in bfdstabsectionfindnearestline in syms.c. Attackers could leverage this vulnerability to cause a denial of service application crash via a crafted E...

CVE-2018-11878: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, possibility of invalid memory access while processing driver command in WLAN function...

Lizard Denial of Service Vulnerability (CNVD-2019-07131)

Lizard formerly known as LZ5 is a lossless compression software package. A security vulnerability exists in the 'LZ5compresscontinue' function of the lz5compress.c file in version 2.0 of Lizard, which stems from the program using an invalid memory address. An attacker could exploit this...