CVE-2018-18310: Improper Restriction of Operations within the Bounds of a Memory Buffer

An invalid memory address dereference was discovered in dwflsegmentreportmodule.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers to cause a denial of service application crash with a crafted ELF file, as demonstrated by considernotes...

The vulnerability of the `sdcardfs_open` function in the Android operating system’s kernel allows a hacker to increase their privileges.

The vulnerability of the sdcardfsopen function in the Android operating system’s kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2018-12541

In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There should be a reasonnable limit 8192 bytes above which the WebSocket gets an HTTP response with the...

CVE-2018-8423: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1,...

CVE-2018-18193: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in libgig 4.1.0. There is operator new failure due to a big pWavePoolTable heap request in DLS::File::File in DLS.cpp...

CVE-2018-18197: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in libgig 4.1.0. There is an operator new failure due to a big pSampleLoops heap request in DLS::Sampler::Sampler in DLS.cpp...

Philips iSite/IntelliSpace PACS Vulnerabilities (Update A)

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: Philips Equipment: iSite and IntelliSpace PACS Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Code/Source Code...

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine for Windows operating systems arises due to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created Excel file...

CVE-2018-16713: Improper Restriction of Operations within the Bounds of a Memory Buffer

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send an IOCTL 0x9C402084 with a buffer containing user defined content. The driver's subroutine will execute a rdmsr instruction with the user's buffer for...

Vulnerability of Firefox, Firefox ESR, and Thunderbird’s email client, caused by overflowing memory buffers, allowing attackers to execute arbitrary code.

The vulnerabilities of the Firefox browser, Firefox ESR, and the Thunderbird email client are caused by a buffer overflow in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

CVE-2018-1149: Improper Restriction of Operations within the Bounds of a Memory Buffer

cgisystem in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP requests...

CVE-2018-17143: Improper Restriction of Operations within the Bounds of a Memory Buffer

The html package aka x/net/html through 2018-09-17 in Go mishandles...

CVE-2018-17076: Improper Restriction of Operations within the Bounds of a Memory Buffer

GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file...

The vulnerability of the IBM Security Access Manager access control system arises from an operation that goes beyond the buffer in memory, allowing a perpetrator to execute arbitrary code.

The vulnerability of the IBM Security Access Manager lies in the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

CVE-2018-8464: Improper Restriction of Operations within the Bounds of a Memory Buffer

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

CVE-2017-1083: Improper Restriction of Operations within the Bounds of a Memory Buffer

In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default. This results in the possibility a poorly written process could be cause a stack overflow...

CVE-2017-1084: Improper Restriction of Operations within the Bounds of a Memory Buffer

In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard-page. This results in the possibility a poorly written process could be cause a stack overflow...

CVE-2017-1085: Improper Restriction of Operations within the Bounds of a Memory Buffer

In FreeBSD before 11.2-RELEASE, an application which calls setrlimit to increase RLIMITSTACK may turn a read-only memory region below the stack into a read-write region. A specially crafted executable could be exploited to execute arbitrary code in the user context...

The vulnerability of web-based services of microprogramming software for programmable logic controllers from Schneider Electric—Modicon Premium, Modicon Quantum, and Modicon M340—allows a intruder to trigger a service failure.

The vulnerability of web-based services for microprogramming software-controlled Schneider Electric Modicon Premium, Modicon Quantum, and Modicon M340 devices lies in the fact that the operation data is stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor...

CVE-2018-15871: Improper Restriction of Operations within the Bounds of a Memory Buffer

An invalid memory address dereference was discovered in decompileSingleArgBuiltInFunctionCall in libming 0.4.8 before 2018-03-12. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...