CVE-2018-14740: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in setfieldone in bootstrap.c while making a query...

CVE-2018-14739: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbcpatternsetdefault in pattern.c...

The vulnerability of the software for interacting with servers via cURL arises from buffer overflows in memory, allowing an attacker to execute arbitrary code or cause a service failure.

The vulnerability of the software for interacting with servers via cURL arises due to the overflow of dynamic memory in the buffer when a FTP connection is closed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using long server...

CVE-2018-14586: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4Mpeg2TsAudioSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp, a different vulnerability than CVE-2018-14532...

CVE-2018-14564: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in libthulac.so in THULAC through 2018-02-25. A SEGV can occur in NGramFeature::findbases in include/cbngramfeature.h...

CVE-2018-14521: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubiosourceavcodecreadframe in io/sourceavcodec.c, as demonstrated by aubiomfcc...

The vulnerability of the IOGraphics component in the Mac OS X operating system allows a hacker to execute arbitrary code with root privileges or cause a service failure.

The vulnerability of the IOGraphics component in the Mac OS X operating system is caused by an overflow in memory buffers. Exploiting this vulnerability can allow an attacker to execute arbitrary code with kernel privileges or cause a service failure using a specially created application...

The vulnerability of the Windows Server operating system component in Mac OS X allows a hacker to execute arbitrary code with system privileges or cause a service failure.

The vulnerability of the Windows Server operating system component in Mac OS X is caused by an overflow in memory buffers. Exploiting this vulnerability can allow an attacker to execute arbitrary code with system privileges or cause a service failure using a specially created application...

The vulnerability of the Hypervisor component of the Mac OS X operating system allows a hacker to execute arbitrary code with root privileges or cause a service failure.

The vulnerability of the Hypervisor component in the Mac OS X operating system arises due to an overflow in the memory buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code with root privileges or cause a service failure using a specially created application...

CVE-2018-0379: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format ARF and Webex Recording Format WRF files. An attacker could exploit these vulnerabilities by providing a user with a malicious .arf or .wrf file via email or URL and convincing the user to...

CVE-2018-14362: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character...

[ASA-201807-8] libcurl-compat: arbitrary code execution

Arch Linux Security Advisory ASA-201807-8 ========================================= Severity: High Date : 2018-07-16 CVE-ID : CVE-2018-0500 Package : libcurl-compat Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-733 Summary ======= The package libcurl-compa...

[ASA-201807-9] libcurl-gnutls: arbitrary code execution

Arch Linux Security Advisory ASA-201807-9 ========================================= Severity: High Date : 2018-07-16 CVE-ID : CVE-2018-0500 Package : libcurl-gnutls Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-734 Summary ======= The package libcurl-gnutl...

CVE-2018-14047: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue has been found in PNGwriter 0.7.0. It is a SEGV in pngwriter::readfromfile in pngwriter.cc. NOTE: there is a "Warning: PNGwriter was never designed for reading untrusted files with it. Do NOT use this in sensitive environments, especially DO NOT read PNGs from unknown sources with it!"...

CVE-2018-13997: Improper Restriction of Operations within the Bounds of a Memory Buffer

Genann through 2018-07-08 has a SEGV in genannrun in genann.c...

CVE-2018-14015: Improper Restriction of Operations within the Bounds of a Memory Buffer

The sdbsetinternal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file because of missing input validation in rbindwarfparsecompunit in libr/bin/dwarf.c...

CVE-2018-13869: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5Olinkdecode in H5Olink.c...

CVE-2018-5872: Improper Restriction of Operations within the Bounds of a Memory Buffer

While parsing over-the-air information elements in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-07-05, the use of an out-of-range pointer offset can occur...

The vulnerability of Internet Explorer’s JavaScript script handlers allows a hacker to execute arbitrary code.

The vulnerability of Internet Explorer’s JavaScript script handlers arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or Microsoft Office document...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...