Linaro OP-TEE Buffer Overflow Vulnerability

Linaro OP-TEE is an open source trusted execution environment from Linaro UK. A buffer overflow vulnerability exists in opteeos in Linaro OP-TEE 3.3.0 and earlier versions. The vulnerability stems from a networked system or product performing operations on memory without properly validating data...

ProClima Buffer Overflow Vulnerability

Schneider Electric ProClima is a heat calculation software package from Schneider Electric, France. The software provides thermal management capabilities for environmental and electrical/electronic equipment installed in control panels by analyzing specified thermal data. A buffer overflow...

TRENDnet TEW-827DRU Stack Buffer Overflow Vulnerability

The TRENDnet TEW-827DRU is a wireless router from TRENDnet. A buffer overflow vulnerability exists in the TRENDnet TEW-827DRU using firmware version 2.04B03 and earlier. The vulnerability originates when a network system or product performs an operation on memory without properly validating data...

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-16202)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27400)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

Microsoft Edge Buffer Overflow Vulnerability

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A buffer overflow vulnerability exists in the way the Chakra scripting engine in Microsoft Edge handles in-memory objects. The vulnerability originates when a web system or product perfor...

Adobe Media Encoder Buffer Overflow Vulnerability

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. A buffer overflow vulnerability exists in version 13.0.2 of Adobe Media Encoder for Windows and macOS-based platforms, which originates when a networked system or product performs an operation ...

Kaspersky Lab Antivirus Engine Heap Buffer Overflow Vulnerability

Kaspersky Lab Antivirus Engine is an anti-virus engine from the Russian laboratory Kaspersky. A heap buffer overflow vulnerability exists in versions prior to Kaspersky Lab Antivirus Engine 04.apr.2019. The vulnerability originates when a networked system or product performs an operation on memor...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Firefox

CVE-2019-9810 Exploit for Firefox on Windows CVE-2019-9810 is...

The vulnerability of the xml_elem_parse_buf() function in the PHP programming language lies in its ability to read data beyond the boundaries of the memory buffer, allowing an attacker to gain unauthorized access to protected data.

The vulnerability of the xmlelemparsebuf function ext/xmlrpc/libxmlrpc/xmlelement.c in the PHP interpreter is related to reading data beyond the boundaries of the memory buffer. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected data...

The vulnerability of the “read” function in PHP’s DNS_get_record interpreter, related to reading data beyond the boundaries of the memory buffer, allows attackers to access confidential data.

The vulnerability of the “read” function in the PHP language interpreter’s dnsgetrecord function relates to reading data beyond the boundaries of the allocated memory buffer. Exploiting this vulnerability could allow an attacker to gain access to confidential data during the processing of DNS...

GPAC Buffer Overflow Vulnerability (CNVD-2019-13566)

GPAC is an open source multimedia framework. A buffer error vulnerability exists in GPAC version 0.7.1. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write operations being...

Google Android Qualcomm Closed Source Component Resource Depletion Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A resource exhaustion vulnerability exists in the Qualcomm closed-source component in Android. An attacker can exploit the vulnerability to cause invalid indexes to exceed bound memory accesses...

IBM DB2 Stack Buffer Overflow Vulnerability

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A stack-based buffer overflow vulnerability exists in IBM DB2 libdb2e.so.1, which originates when a...

The vulnerability of the processmetadata function in the GNU Libextractor library, related to reading beyond the memory boundaries, allows attackers to cause service failures or disclose protected information.

The vulnerability of the processmetadata function in the GNU Libextractor library is related to the issue of reading beyond the memory boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures or expose protected information...

The vulnerability of the `proceed_next_node` function in the GNU C library, which relates to the possibility of reading buffers outside the memory boundary, allows attackers to trigger a service failure.

The vulnerability in the proceednextnode function in posix/regexec.c of the GNU C library is related to the ability to read buffers outside the memory boundary, caused by comparing with a regular expression that does not depend on registers. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the Wireshark traffic analyzer program, related to reading data beyond the memory boundaries, allows a hacker to cause a service failure.

The vulnerability of the Wireshark traffic analyzer program relates to reading data beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially crafted package...

Clam AntiVirus Buffer Overflow Vulnerability

Clam AntiVirus is an open source antivirus engine from the ClamAV team for detecting Trojans, viruses, malware and other malicious threats. A buffer error vulnerability exists in the PDF scanning feature in Clam AntiVirus versions 0.101.1 and 0.101.0. The vulnerability originates when a networked...

The vulnerability of the HECI subsystem of the microprogramming software, Intel Converged Security and Manageability Engine, Intel Trusted Execution Engine, and Intel Server Platform Services allows a perpetrator to execute arbitrary code.

The vulnerability of Microprogramming Software, including Intel Converged Security and Manageability Engine CSME, Intel Trusted Execution Engine TXE, and Intel Server Platform Services SPS, is related to the execution of operations outside of the buffer in memory. Exploitation of this vulnerabili...

The vulnerability of the sec_merge_hash_lookup function in the GNU Binutils development tool, related to incorrect checking of memory access boundaries, allows a hacker to trigger a service failure.

The vulnerability of the secmergehashlookup function in the GNU Binutils development tooling is related to improper checking of memory access boundaries, which can lead to reading beyond the buffer’s bounds, especially when the size of a segment is not a multiple of the size of a single record...