CVE-2018-16985

In Lizard formerly LZ5 2.0, use of an invalid memory address was discovered in LZ5compresscontinue in lz5compress.c, related to LZ5compressfastSmall and MEMread32. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

Invalid Memory Address Dereference Vulnerability in libming 'decompileGETVARIABLE' Function

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A security vulnerability exists in the 'decompileGETVARIABLE' function in libming 0.4.8 version 0.4.8 prior to 2018-03-12, which stems from a...

CVE-2018-14544

There exists one invalid memory read bug in AP4SampleDescription::GetFormat in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts...

UBUNTU-CVE-2018-14544

There exists one invalid memory read bug in AP4SampleDescription::GetFormat in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts...

CVE-2018-14544

There exists one invalid memory read bug in AP4SampleDescription::GetFormat in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts...

CVE-2018-14544

There exists one invalid memory read bug in AP4SampleDescription::GetFormat in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts...

CVE-2018-14544

There exists one invalid memory read bug in AP4SampleDescription::GetFormat in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts...

CVE-2018-14545

There exists one invalid memory read bug in AP4SampleDescription::GetType in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts...

Bento4 Invalid Memory Read Vulnerability

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. An invalid memory read vulnerability exists in AP4SampleDescription::GetType in Ap4SampleDescription.h in Bento4 1.5.1-624, which can be exploited by an attacker to cause a denial of service via specially crafted mp4...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-689)

This update for GraphicsMagick fixes the following issues : The following security fixes were fixed : - CVE-2018-10805: Fixed a memory leak in ReadYCBCRImage in coders/ycbcr.c and rgb.c, cmyk.c and gray.c boo1095812 - Fixed invalid memory reads in dcm.c boo1075821c14 %NASLMINLEVEL 70300 C Tenable...

openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2018:1862-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for GraphicsMagick (low)

This update for GraphicsMagick fixes the following issues: The following security fixes were fixed: - CVE-2018-10805: Fixed a memory leak in ReadYCBCRImage in coders/ycbcr.c and rgb.c, cmyk.c and gray.c boo1095812 - Fixed invalid memory reads in dcm.c boo1075821c14...

UBUNTU-CVE-2018-12982

Invalid memory read in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6-rc1 allows remote attackers to have denial-of-service impact via a crafted file...

Security Bulletin: Vulnerabilities in GStreamer affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in GStreamer. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-9634 DESCRIPTION: GStreamer is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the flxdecodedeltafli function in...

Denial Of Service (DoS)

libjasper.so is vulnerable to denial of service DoS attacks. A malicious user can pass a JPC file to the jpcundoroi function in jpcdec.c to cause an invalid memory read, crashing the application...

Invalid Memory Dereference

libexiv2.so is vulnerable to invalid memory dereference attacks. The vulnerability exists in Exiv2::getULong in types.cpp where parsing an image with invalid exif values would cause a denial of service DoS...

Invalid Memory Dereference

libexiv2.so is vulnerable to invalid memory address dereference attacks. The vulnerability exists in Exiv2::StringValueBase::read of value.cpp while parsing an image with malicious exif values, causing a denial of service DoS attack...

Natus Xltek EEG NeuroWorks Invalid KeyTree Entry Denial-of-Service Vulnerability

Summary An exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of service. An attacker can send a malicious packet to trigger this...

Huawei Products Invalid Memory Access Vulnerability (huawei-sa-20180425-02-buffer)

Multiple Huawei Switches are prone to an invalid memory access vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2017-17314

Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have an invalid memory access vulnerability. An unauthenticated attacker has to find a way to send...