wolfSSL buffer overflow vulnerability (CNVD-2019-34376)

wolfSSL formerly known as CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A buffer overflow vulnerability exists in the 'CheckCertSignatureex' function in the wolfcrypt/src/asn.c file in wolfSSL 4.1.0 and earli...

Artifex Software MuPDF Buffer Overflow Vulnerability (CNVD-2020-54480)

Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A buffer error vulnerability exists in the 'fzchartorune' function of the fitz/string.c file in Artifex Software MuPDF versions prior to 1.16.0. The vulnerability stems from a networked system or product performi...

ESTsoft Alzip Buffer Overflow Vulnerability (CNVD-2020-17027)

ESTsoft Alzip is a compression/decompression application from ESTsoft Korea that supports multiple formats. A buffer overflow vulnerability exists in ESTsoft Alzip 10.83 and prior versions, which originates when a networked system or product performs an operation in memory without properly...

Facebook Proxygen Buffer Overflow Vulnerability

Facebook Proxygen is a set of open source C++ HTTP class libraries from the U.S. company Facebook . A buffer overflow vulnerability exists in configurations in versions prior to Facebook Proxygen 2019.07.22.00. The vulnerability stems from a network system or product performing operations in memo...

Linaro OP-TEE Buffer Overflow Vulnerability (CNVD-2019-23142)

Linaro OP-TEE is an open source trusted execution environment from Linaro UK. A buffer overflow vulnerability exists in opteeos in Linaro OP-TEE 3.3.0 and earlier versions. The vulnerability stems from a networked system or product performing operations on memory without properly validating data...

Linaro OP-TEE Buffer Overflow Vulnerability (CNVD-2019-23064)

Linaro OP-TEE is an open source trusted execution environment from Linaro UK. A buffer overflow vulnerability exists in opteeos in Linaro OP-TEE 3.3.0 and earlier versions. The vulnerability stems from a networked system or product performing operations on memory without properly validating data...

The vulnerability of VMware ESXi, VMware Fusion, and Vmware Workstation virtualization platforms arises from reading data beyond the buffer in memory, allowing attackers to exploit this to disclose protected information.

The vulnerability of VMware ESXi, VMware Fusion, and Vmware Workstation virtualization platforms is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

HP Color LaserJet Pro M280-M281 Multifunction Printer series and HP LaserJet Pro MFP M28-M31 Printer series Buffer Overflow Vulnerability

HP Color LaserJet Pro M280-M281 Multifunction Printer series and HP LaserJet Pro MFP M28-M31 Printer series are printer products introduced by Hewlett-Packard HP. A buffer overflow vulnerability exists in the HP Color LaserJet Pro M280-M281 Multifunction Printer series prior to version 20190419 a...

SHEKAR Technology Endoscope Buffer Overflow Vulnerability (CNVD-2019-18876)

SHEKAR Technology Endoscope is a portable endoscopic device from SHEKAR Technology, China. A buffer overflow vulnerability exists in SHEKAR Technology Endoscope. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...

Microsoft Edge Buffer Overflow Vulnerability (CNVD-2019-27396)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A buffer overflow vulnerability exists in the way the Chakra scripting engine in Microsoft Edge handles in-memory objects. The vulnerability originates when a web system or product perfor...

Intel NUC Kit Buffer Overflow Vulnerability

The Intel NUC Kit is a small desktop computer from Intel Corporation USA. A buffer overflow vulnerability exists in the system firmware in the Intel NUC Kit, which originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting ...

Input validation

XML Entity Expansion Billion Laughs Attack on Pippo 1.12.0 results in Denial of Service.Entities are created recursively and large amounts of heap memory is taken. Eventually, the JVM process will run out of memory. Otherwise, if the OS does not bound the memory on that process, memory will...

Microsoft Windows Jet Database Engine Buffer Overflow Vulnerability (CNVD-2019-17524)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A buffer error vulnerability...

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-16070)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

Microsoft Windows Jet Database Engine Buffer Overflow Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A buffer raise vulnerability...

Fortinet FortiOS Heap Buffer Overflow Vulnerability

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A heap buffer overflow...

The vulnerability of the Wireshark traffic analyzer program, related to reading data beyond the memory boundaries, allows a hacker to cause a service failure.

The vulnerability of the Wireshark traffic analyzer program relates to reading data beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially crafted package...

The vulnerability of the elf32_xlatetom function in the elfutils package, related to the possibility of the operation exceeding the buffer boundaries in memory, allows a hacker to trigger a service failure.

The vulnerability of the elf32xlatetom function in the libelf package within the elfutils suite is related to the possibility of the operation exceeding the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure due to a specially crafted E...

The vulnerability of the Intel Graphics Kernel Mode Driver relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Intel Graphics Kernel Mode Driver is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...