CVE-2019-9536

CVE-2019-9536 affects the Apple iPhone 3GS bootrom malloc implementation, which returns a non-NULL pointer when memory allocation fails (alloc8). The vulnerability enables an attacker with physical access to install arbitrary firmware on the device. The connected documents provide the affected co...

PT-2019-19693

Name of the Vulnerable Software and Affected Versions Apple iPhone 3GS Description The issue concerns the bootrom malloc implementation in Apple iPhone 3GS, which returns a non-NULL pointer when it is unable to allocate memory. An attacker who has physical access to the device can exploit this to...

CVE-2019-9536: Improper Handling of Exceptional Conditions

Apple iPhone 3GS bootrom malloc implementation returns a non-NULL pointer when unable to allocate memory, aka 'alloc8'. An attacker with physical access to the device can install arbitrary firmware...

EulerOS 2.0 SP3 : cairo (EulerOS-SA-2019-2268)

According to the version of the cairo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read because of mishandling o...

CVE-2019-8354

An issue was discovered in SoX 14.4.2. lsxmakelpf in effectidsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow...

CVE-2018-21027

Boa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory OOM condition because malloc is mishandled...

Design/Logic Flaw

Boa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory OOM condition because malloc is mishandled...

CVE-2018-21027

Boa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory OOM condition because malloc is mishandled...

CVE-2018-21027

Boa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory OOM condition because malloc is mishandled...

CVE-2018-21027

CVE-2018-21027 affects Boa up to version 0.94.14rc21. The issue is an out-of-memory (OOM) condition triggered by mishandled malloc, allowing remote attackers to exhaust memory. The connected documents confirm the affected software and root cause but do not provide exploit specifics, affected plat...

PT-2019-10453

Name of the Vulnerable Software and Affected Versions Boa versions prior to 0.94.14rc21 Description The issue allows remote attackers to trigger an out-of-memory OOM condition due to mishandled malloc. Recommendations For versions prior to 0.94.14rc21, update to a version that contains a fix for...

CVE-2018-21027: Improper Restriction of Operations within the Bounds of a Memory Buffer

Boa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory OOM condition because malloc is mishandled...

Denial Of Service (DoS)

libpcap.so is vulnerable to denial of service. PCAPNG reader does not perform sanity checks before doing malloc, causing buffer-overflow if there are errors in pcapng reading...

EulerOS 2.0 SP5 : ImageMagick (EulerOS-SA-2019-1970)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack o...

Silicon Graphics LibTIFF Integer Overflow Vulnerability

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. An integer overflow vulnerability exists in the 'TIFFCheckMalloc' and 'TIFFCheckRealloc'...

unixODBC security update

2.3.1-14.0.1 - backport unchecked malloc memory references fix Orabug: 29684195 2.3.1-14 - fixed insecure buffer copy 1571530 - fixed possible buffer overflow 1571528 2.3.1-13 - revert: ltdl bundling 2.3.1-12 - fix the libtool-ltdl compatibility Resolves: rhbz1267438...

PDFResurrect buffer overflow vulnerability (CNVD-2020-16832)

PDFResurrect is a tool for analyzing PDF documents. A buffer error vulnerability exists in the 'pdfloadpageskids' function of the pdf.c file in versions of PDFResurrect prior to 0.18, which can be exploited by an attacker to cause malloc failures and out-of-bounds writes...

CVE-2019-14934

An issue was discovered in PDFResurrect before 0.18. pdfloadpageskids in pdf.c doesn't validate a certain size value, which leads to a malloc failure and out-of-bounds write...

CVE-2019-14934

An issue was discovered in PDFResurrect before 0.18. pdfloadpageskids in pdf.c doesn't validate a certain size value, which leads to a malloc failure and out-of-bounds write...

CVE-2019-14934

An issue was discovered in PDFResurrect before 0.18. pdfloadpageskids in pdf.c doesn't validate a certain size value, which leads to a malloc failure and out-of-bounds write...