286 matches found
CVE-2018-14449
CVE-2018-14449 affects libgig 4.1.0, with an out-of-bounds read in gig::File::UpdateChunks (gig.cpp). The connected documents confirm this specific root cause and affected component. The vulnerability details describe the erroneous memory access but do not provide explicit exploitation conditions...
CVE-2018-14458
An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData1 access in the function store32 in helper.h...
CVE-2018-14449
An issue was discovered in libgig 4.1.0. There is an out of bounds read in gig::File::UpdateChunks in gig.cpp...
CVE-2018-14451
CVE-2018-14451 affects libgig 4.1.0. A heap-based buffer overflow occurs in RIFF::Chunk::Read (RIFF.cpp). Some sources (CNVD-2018-15176) state an attacker could exploit by tricking a user into opening a crafted file to execute arbitrary code. Other linked advisories reiterate the heap overflow in...
CVE-2018-14456
CVE-2018-14456 affects libgig 4.1.0. The vulnerability is an out-of-bounds write in DLS.cpp within DLS::Info::SaveString. The available documents confirm the affected component and method but do not provide remediation details, affected platforms beyond libgig 4.1.0, or explicit exploitation info...
CVE-2018-14459
CVE-2018-14459 affects libgig 4.1.0. The vulnerability is an out-of-bounds write in pData[0] access within the store16 function in helper.h. Multiple connected sources (NVD, Ubuntu, OSV, CNVD, SUSE, Nessus/NASL context, etc.) corroborate the same issue. No exploit details or patch/version remedia...
CVE-2018-14450
CVE-2018-14450 affects libgig 4.1.0. The vulnerability is an out-of-bounds read in the update chunks of dimensional regions feature, specifically gig::Region::UpdateChunks in gig.cpp. Multiple sources (CNVD-2018-15177, SUSE SUSEVE, NVD, OSV variants) describe this flaw; some notes mention a poten...
CVE-2018-14458
An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData1 access in the function store32 in helper.h...
CVE-2018-14450
An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the "update dimension region's chunks" feature of the function gig::Region::UpdateChunks in gig.cpp...
CVE-2018-14451
An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in the function RIFF::Chunk::Read in RIFF.cpp...
CVE-2018-14452
libgig 4.1.0 contains an out-of-bounds read in gig.cpp within gig::Region::UpdateChunks (the “always assign the sample of the first dimension region of this region” path). Connected sources (CNVD/OSV/SUSE/UBUNTU/NVD) consistently describe this vulnerability as an out-of-bounds read in libgig 4.1....
CVE-2018-14459
An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in pData0 access in the function store16 in helper.h...
CVE-2018-14457
An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::UpdateChunks in DLS.cpp...
CVE-2018-14449
An issue was discovered in libgig 4.1.0. There is an out of bounds read in gig::File::UpdateChunks in gig.cpp...
CVE-2018-14456
An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::SaveString in DLS.cpp...
CVE-2018-14452
An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the "always assign the sample of the first dimension region of this region" feature of the function gig::Region::UpdateChunks in gig.cpp...
CVE-2018-14454
An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the function RIFF::Chunk::Read in RIFF.cpp...
CVE-2018-14454
CVE-2018-14454 affects libgig 4.1.0, due to an out-of-bounds read in RIFF::Chunk::Read (RIFF.cpp). Impact described as potential data exposure/integrity hazard; exploitation details are not provided in the supplied documents. No remediation/fix version is specified in the provided data; monitor f...
CVE-2018-14453
CVE-2018-14453 affects libgig 4.1.0 with a heap-based buffer overflow in pData[1] access within the store16 function in helper.h. Supported documents consistently describe the vulnerability as a heap overflow; exploitation details, affected products/versions beyond 4.1.0, and fixes are not provid...