PT-2019-1344

Name of the Vulnerable Software and Affected Versions glibc versions through 2.28 Description The issue is related to the string component in the GNU C Library, specifically when running on the x32 architecture. It incorrectly attempts to use a 64-bit register for size t in assembly codes, which...

PT-2019-1677

Name of the Vulnerable Software and Affected Versions elfutils version 0.175 Description The issue is related to an incorrect overflow check in the elf cvt note function, which attempts a negative-sized memcpy. This can cause a segmentation fault when crafted ELF input is provided, leading to a...

PT-2019-19314

Name of the Vulnerable Software and Affected Versions PHP versions prior to 7.3.1 Description An issue was discovered where an invalid multibyte string supplied as an argument to the mb split function can cause PHP to execute memcpy with a negative argument. This could result in reading and writi...

UBUNTU-CVE-2018-16885

A flaw was found in the Linux kernel that allows the userspace to call memcpyfromiovecend and similar functions with a zero offset and buffer length which causes the read beyond the buffer boundaries, in certain cases causing a memory access fault and a system halt by accessing invalid memory...

Buffer overflow

A Buffer Error vulnerability exists in PowerSuite 2, all released versions VW3A8104 & Patches, which could cause an overflow in the memcpy function, leading to corruption of data and program instability...

CVE-2018-7796

A Buffer Error vulnerability exists in PowerSuite 2, all released versions VW3A8104 & Patches, which could cause an overflow in the memcpy function, leading to corruption of data and program instability...

CVE-2018-7796

CVE-2018-7796 concerns Schneider Electric PowerSuite 2 (VW3A8104 and patches). The root cause is a buffer overflow in memcpy leading to data corruption and program instability across all released versions. No exploits or remediation details are provided in the connected documents.

CVE-2018-7796: Improper Restriction of Operations within the Bounds of a Memory Buffer

A Buffer Error vulnerability exists in PowerSuite 2, all released versions VW3A8104 & Patches, which could cause an overflow in the memcpy function, leading to corruption of data and program instability...

Information disclosure

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system...

CVE-2018-19320

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system...

CVE-2018-19320: Undefined Security Weakness

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system...

PT-2018-2179

Name of the Vulnerable Software and Affected Versions PowerSuite 2 versions VW3A8104 and all patches Description The issue is related to a buffer overflow error in the memcpy function of PowerSuite 2. Exploitation of this issue could allow a remote attacker to cause a buffer overflow, leading to...

CVE-2018-19417

An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parsepublishvhdr that parses MQTT PUBLISH messages with a variable length header uses memcpy to input data into a fixed size buffer. The allocated buffer can fit only MQTTMAXTOPICLENGTH default 64 bytes, and a lengt...

PT-2018-14953

Name of the Vulnerable Software and Affected Versions Contiki-NG versions prior to 4.2 Description A issue in the MQTT server allows for Remote Code Execution via a stack-smashing attack. The parse publish vhdr function uses memcpy to input data into a fixed-size buffer without a length check,...

CVE-2018-19417: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parsepublishvhdr that parses MQTT PUBLISH messages with a variable length header uses memcpy to input data into a fixed size buffer. The allocated buffer can fit only MQTTMAXTOPICLENGTH default 64 bytes, and a lengt...

WhatsApp - RTP Processing Heap Corruption Exploit

Exploit for Android platform in category dos / poc Heap corruption can occur when the WhatsApp mobile application receives a malformed RTP packet. 08-31 15:43:50.721 9428 9713 F libc : Fatal signal 11 SIGSEGV, code 1, fault addr 0x7104200000 in tid 9713 Thread-11 08-31 15:43:50.722 382 382 W :...

WhatsApp - RTP Processing Heap Corruption

WhatsApp - RTP Processing Heap Corruption Heap corruption can occur when the WhatsApp mobile application receives a malformed RTP packet. 08-31 15:43:50.721 9428 9713 F libc : Fatal signal 11 SIGSEGV, code 1, fault addr 0x7104200000 in tid 9713 Thread-11 08-31 15:43:50.722 382 382 W : debuggerd:...

tcpreplay heap buffer overflow vulnerability (CNVD-2018-20537)

Tcpreplay is a set of open source utilities for editing and replaying network traffic for UNIX based operating systems. A heap buffer overflow vulnerability exists in the sendpackets.c file in Tcpreplay version 4.3.0, which stems from the 'getnextpacket' function using the 'memcpy' function in an...

CVE-2018-17582

Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The getnextpacket function in the sendpackets.c file uses the memcpy function unsafely to copy sequences from the source buffer pktdata to the destination prevpacket-pktdata. This will result in a Denial of Service DoS and potentially...

DEBIAN-CVE-2018-17582

Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The getnextpacket function in the sendpackets.c file uses the memcpy function unsafely to copy sequences from the source buffer pktdata to the destination prevpacket-pktdata. This will result in a Denial of Service DoS and potentially...