Lucene search
K

1716 matches found

OSV
OSV
added 2019/05/20 4:29 p.m.1 views

DEBIAN-CVE-2019-12211

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

7.5CVSS7AI score0.0421EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2019/05/20 4:29 p.m.18 views

CVE-2019-12211

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

7.5CVSS7.1AI score0.0421EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2019/05/14 12:29 p.m.20 views

CVE-2018-7437

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a memcpy call of the parseSST function...

8.8CVSS2.5AI score0.02123EPSS
Exploits1References1
OSV
OSV
added 2019/04/30 3:37 p.m.0 views

GHSA-QX2V-J445-G354 Improper Input Validation in Google TensorFlow

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS5.9AI score0.0043EPSS
Exploits0References8
Prion
Prion
added 2019/04/24 5:29 p.m.18 views

Code injection

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

5.8CVSS7.8AI score0.0043EPSS
Exploits0References1Affected Software2
NVD
NVD
added 2019/04/24 5:29 p.m.35 views

CVE-2018-7577

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS7.9AI score0.0043EPSS
Exploits0References1
PyPA
PyPA
added 2019/04/24 5:29 p.m.5 views

PYSEC-2019-225

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS6.8AI score0.0043EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2019/04/24 5:29 p.m.36 views

PYSEC-2019-207

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS5.9AI score0.0043EPSS
Exploits0References2
OSV
OSV
added 2019/04/24 5:29 p.m.52 views

PYSEC-2019-225

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS2.5AI score0.0043EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2019/04/01 12:0 a.m.48 views

Debian DLA-1741-1 : php5 security update

Several vulnerabilities have been found in php5, a server-side, HTML-embedded scripting language. CVE-2019-9637 rename across the device may allow unwanted access during processing. CVE-2019-9638, CVE-2019-9639 Uninitialized read in exifprocessIFDinMAKERNOTE. CVE-2019-9640 Invalid Read on...

9.8CVSS6.8AI score0.09395EPSS
Exploits6References8
Tenable Nessus
Tenable Nessus
added 2019/03/27 12:0 a.m.35 views

openSUSE Security Update : glibc (openSUSE-2019-422)

This update for glibc fixes the following issues : This security issue was fixed : - Fixed an buffer overwrite issue in memcpy for Knights Landing CPUs boo1092877, CVE-2018-11237 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

7.8CVSS7.5AI score0.00858EPSS
Exploits3References3
OSV
OSV
added 2019/03/24 2:29 a.m.3 views

CVE-2019-9962

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to VCRUNTIME140!memcpy...

7.8CVSS7.2AI score0.01257EPSS
Exploits0References1
NVD
NVD
added 2019/03/24 2:29 a.m.17 views

CVE-2019-9962

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to VCRUNTIME140!memcpy...

7.8CVSS8.1AI score0.01257EPSS
Exploits0References1
CVE
CVE
added 2019/03/24 1:21 a.m.44 views

CVE-2019-9962

The CVE-2019-9962 entry concerns XnView MP 0.93.1 on Windows. The vulnerability arises from handling crafted files that trigger a crash (denial of service) and potentially other unspecified impacts, linked to VCRUNTIME140!memcpy. Affected component is the image viewer application (XnView MP 0.93....

7.8CVSS8AI score0.01257EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2019/03/24 1:21 a.m.22 views

CVE-2019-9962

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to VCRUNTIME140!memcpy...

8.1AI score0.01257EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2019/03/13 2:11 a.m.2 views

kernel: out-of-bounds memcpy in fs/ext4/inline.c:ext4_read_inline_data() with crafted ext4 image

The fs/ext4/inline.c:ext4readinlinedata function in the Linux kernel performs a memcpy with an untrusted length value in certain circumstances involving a crafted filesystem that stores the system.data extended attribute value in a dedicated inode. The unbound copy can cause memory corruption or...

5.9CVSS7.1AI score0.16352EPSS
Exploits4References4
Veracode
Veracode
added 2019/03/04 3:23 a.m.15 views

Denial Of Service (DoS)

libmatio.so is vulnerable to denial of service DoS attacks. The vulnerability exists through a possible stack-based buffer over-read in a memcpy operation in MatVarReadNextInfo5 in src/mat5.c, resulting in a denial of service condition when the vulnerability is exploited...

9.1CVSS8.7AI score0.0207EPSS
Exploits1References3Affected Software1
Prion
Prion
added 2019/02/27 2:29 p.m.16 views

Integer overflow

In AdvanceCOMP 2.1, pngcompress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. There is also a heap-based buffer over-read...

6.8CVSS7.5AI score0.01424EPSS
Exploits1References6Affected Software4
NVD
NVD
added 2019/02/27 2:29 p.m.22 views

CVE-2019-9210

In AdvanceCOMP 2.1, pngcompress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. There is also a heap-based buffer over-read...

7.8CVSS7.7AI score0.01424EPSS
Exploits1References6
OSV
OSV
added 2019/02/27 2:29 p.m.24 views

CVE-2019-9210

In AdvanceCOMP 2.1, pngcompress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. There is also a heap-based buffer over-read...

7.8CVSS7.8AI score
Exploits0References6
Rows per page
Query Builder