H.264 decoder buffer overflow vulnerability in multiple Qualcomm products

The Qualcomm MDM9650 and others are a central processing unit CPU product of Qualcomm Incorporated USA. A buffer overflow vulnerability exists in the H.264 decoder in multiple Qualcomm products, which arises when a networked system or product performs an operation in memory without properly...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2019-13770)

The Qualcomm MDM9650 and others are a central processing unit CPU product of Qualcomm Incorporated USA. The buffer overflow vulnerability exists in multiple Qualcomm products and originates when a networked system or product performs an operation in memory without properly validating the data...

Google Android System heap.cc file buffer overflow vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the VisitPointers of the heap.cc file in Android. The vulnerability stems from a networked system or product performing operations in memory without...

Forcepoint Email Security Buffer Overflow Vulnerability

Forcepoint Email Security is a suite of email protection solutions from US-based Forcepoint. The product includes features such as spam filtering, malware detection, phishing protection, and protection against intrusion BEC attacks. A stack-based buffer overflow vulnerability exists in Forcepoint...

Clam AntiVirus Buffer Overflow Vulnerability (CNVD-2019-29198)

Clam AntiVirus is an open source antivirus engine from the ClamAV team for detecting Trojans, viruses, malware and other malicious threats. A buffer overflow vulnerability exists in the PE file scanning feature in Clam AntiVirus 0.101.1 and prior versions. The vulnerability originates when a...

Clam AntiVirus Buffer Overflow Vulnerability

Clam AntiVirus is an open source antivirus engine from the ClamAV team for detecting Trojans, viruses, malware and other malicious threats. A buffer error vulnerability exists in Clam AntiVirus. The vulnerability originates when a networked system or product performs an operation on memory withou...

Remote code execution vulnerability in rdesktop (CNVD-2019-12478)

rdesktop is an open source remote desktop client program. A remote code execution vulnerability exists in rdesktop 1.8.3 and earlier versions that originates when a networked system or product performs an operation in memory without properly validating data boundaries, resulting in an incorrect...

The vulnerability of the Vijeo Designer Lite software lies in its insufficient control over memory boundaries, allowing a malicious actor to cause system failures in the application.

The vulnerability of the Vijeo Designer Lite software is related to insufficient control over memory boundaries during operation. Exploiting this vulnerability can allow an attacker to cause a malfunction of the application upon opening a DOP project file...

The vulnerability in the implementation of the process_bitmap_updates() function in the RDP client rdesktop, related to reading beyond the memory boundary, allows a hacker to cause a service failure.

The vulnerability of the processbitmapupdates function implementation in the RDP client rdesktop involves reading data beyond the memory boundary. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the “rdpdr_process” function implementation in the RDP client rdesktop, related to reading beyond the memory boundary, allows a attacker to cause a service failure.

The vulnerability of the “rdpdrprocess” function in the RDP client rdesktop implementation is related to reading data beyond the memory boundary. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the “process_secondary_order” function implementation in the RDP client rdesktop allows for reading beyond the memory boundary, enabling attackers to cause service failures.

The vulnerability of the “processsecondaryorder” function in the RDP client rdesktop implementation relates to reading data beyond the memory boundary. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the LibreOffice office software package arises from an operation that occurs outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the LibreOffice office software package arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created document...

The vulnerability in Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page...

Denial Of Service (DoS)

libsystemd.so is vulnerable to denial of service. A lack of memory boundary checks causes the stack to clash with another memory region, allowing a remote attacker to abuse the vulnerability to crash the process, or possibly execute arbitrary OS commands with journald privileges...

The vulnerability of the read_creator_block function in the GIMP graphic editor allows for reading beyond the buffer boundary of dynamic memory, enabling attackers to cause service failures, compromise data integrity, and undermine data confidentiality.

The vulnerability of the readcreatorblock function in the GIMP graphic editor’s plug-in/common/file-psp.c file is related to reading data beyond the buffer boundaries of dynamic memory. Exploiting this vulnerability could allow an attacker to cause service failures, compromise data integrity, and...

The vulnerability of the Microsoft Outlook email client, related to the execution of operations outside the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook email client is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge browsers is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems arises from operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created document...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems arises from operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created document...

PT-2018-2758 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 3.10.x through 4.18.x Description: The issue is related to the chap server compute md5 function in the ISCSI target code of the Linux kernel, which incorrectly checks memory access boundaries, leading to a buffer overflo...