Intel 6th Generation Core Processors and Later Series Buffer Overflow Vulnerability (CNVD-2020-18605)

Intel 6th Generation Core Processors are the sixth-generation Core family of central processing unit CPU products from the U.S.-based Intel Corporation. A buffer overflow vulnerability exists in Intel 6th Generation Core Processors and later series. The vulnerability originates when a networked...

Accusoft ImageGear Buffer Overflow Vulnerability

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A buffer overflow vulnerability exists in Accusoft ImageGear. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries,...

plow buffer overflow vulnerability

plow is a command line playlist generator. A buffer overflow vulnerability exists in plow. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write operations being performed to...

Libarchive Out-of-Bounds Read Vulnerability

libarchive is a multi-format archive and compression library. A buffer error vulnerability exists in the archivewstringappendfrommbs of the archivestring.c file in libarchive version 3.4.0. The vulnerability stems from a networked system or product performing operations in memory without properly...

The vulnerability of functions mode4and5 in the hardware/display/cirrus_vga.c file of the QEMU hardware emulation software allows a hacker to induce a service failure.

The vulnerability of functions mode4and5 in the QEMU hardware emulation software hw/display/cirrusvga.c is related to writing beyond the memory buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a system failure...

ClamAV libclamav Component Buffer Overflow Vulnerability

ClamAV Clam AntiVirus is a free and open source antivirus program from the ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. A buffer overflow vulnerability exists in the libclamav component in versions of ClamAV prior to 0.97.7. The vulnerability...

WLAN component buffer overflow vulnerability in multiple Qualcomm products

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.MDM9607 is a central processing unit CPU product.SDX20 is a modem.WLAN is one of the wireless LAN components. A buffer overflow vulnerability exists in the WLAN component of multiple...

Apache Hadoop Buffer Overflow Vulnerability

Apache Hadoop is the United States Apache Apache Software Foundation's set of open source distributed systems infrastructure. A buffer overflow vulnerability exists in Apache Hadoop. The vulnerability stems from a network system or product performing operations in memory without properly validati...

Linux kernel buffer overflow vulnerability (CNVD-2019-38535)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the writetptentry function in the drivers/infiniband/hw/cxgb4/mem.c file in Linux kernel 5.3.2 and earlier. The vulnerability...

ncurses buffer overflow vulnerability (CNVD-2020-13676)

ncurses is a character terminal processing library , it can provide a series of functions for the user to call and generate text-based user interface . A buffer overflow vulnerability exists in the 'ncfindentry' function in the tinfo/comphash.c file of the terminfo library in versions prior to...

LZ4 Buffer Overflow Vulnerability

LZ4 is a lossless compression algorithm. A buffer overflow vulnerability exists in the 'LZ4write32' function in versions of LZ4 prior to 1.9.2, which originates when a networked system or product performs an operation in memory without properly validating the data boundaries, resulting in an...

libyal libfwsi Buffer Overflow Vulnerability

libyal libfwsi is a library for accessing the Windows Shell. The 'libfwsiextensionblockcopyfrombytestream' function in the libfwsiextensionblock.c file in versions prior to libyal libfwsi 20191006 has a Buffer overflow vulnerability, which arises when a networked system or product performs an...

The vulnerability of the Ruby interpreter, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to trigger a service failure.

The vulnerability of the Ruby interpreter is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

wolfSSL buffer overflow vulnerability (CNVD-2019-34376)

wolfSSL formerly known as CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A buffer overflow vulnerability exists in the 'CheckCertSignatureex' function in the wolfcrypt/src/asn.c file in wolfSSL 4.1.0 and earli...

Artifex Software MuPDF Buffer Overflow Vulnerability (CNVD-2020-54480)

Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A buffer error vulnerability exists in the 'fzchartorune' function of the fitz/string.c file in Artifex Software MuPDF versions prior to 1.16.0. The vulnerability stems from a networked system or product performi...

ESTsoft Alzip Buffer Overflow Vulnerability (CNVD-2020-17027)

ESTsoft Alzip is a compression/decompression application from ESTsoft Korea that supports multiple formats. A buffer overflow vulnerability exists in ESTsoft Alzip 10.83 and prior versions, which originates when a networked system or product performs an operation in memory without properly...

Facebook Proxygen Buffer Overflow Vulnerability

Facebook Proxygen is a set of open source C++ HTTP class libraries from the U.S. company Facebook . A buffer overflow vulnerability exists in configurations in versions prior to Facebook Proxygen 2019.07.22.00. The vulnerability stems from a network system or product performing operations in memo...

Linaro OP-TEE Buffer Overflow Vulnerability (CNVD-2019-23064)

Linaro OP-TEE is an open source trusted execution environment from Linaro UK. A buffer overflow vulnerability exists in opteeos in Linaro OP-TEE 3.3.0 and earlier versions. The vulnerability stems from a networked system or product performing operations on memory without properly validating data...

Linaro OP-TEE Buffer Overflow Vulnerability (CNVD-2019-23142)

Linaro OP-TEE is an open source trusted execution environment from Linaro UK. A buffer overflow vulnerability exists in opteeos in Linaro OP-TEE 3.3.0 and earlier versions. The vulnerability stems from a networked system or product performing operations on memory without properly validating data...

The vulnerability of VMware ESXi, VMware Fusion, and Vmware Workstation virtualization platforms arises from reading data beyond the buffer in memory, allowing attackers to exploit this to disclose protected information.

The vulnerability of VMware ESXi, VMware Fusion, and Vmware Workstation virtualization platforms is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...