Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2020-25838)

NETGEAR R6700 and others are products of NETGEAR, Inc.NETGEAR R6700 is a wireless router.NETGEAR D6200 is a wireless modem.NETGEAR R6800 is a wireless router.NETGEAR R6800 is a wireless router. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability originates when ...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system relates to operations that go beyond the buffer limits in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2019-14105

Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Snapdragon Industrial IOT, Snapdragon Mobile in SDA845, SDM845, SM8150...

Design/Logic Flaw

Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Snapdragon Industrial IOT, Snapdragon Mobile in SDA845, SDM845, SM8150...

CVE-2019-14105

CVE-2019-14105 affects Qualcomm Snapdragon components (e.g., Snapdragon Industrial IOT, SDA845/SDM845/SM8150) where the kernel read a CSL-reserved field as uint16 instead of uint32, causing memory overflow. Exploitation is described as local (LAS) with low complexity in the NVD entry; no explicit...

CVE-2019-14105

Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Snapdragon Industrial IOT, Snapdragon Mobile in SDA845, SDM845, SM8150...

advancecomp: integer overflow in png_compress in pngex.cc

In AdvanceCOMP 2.1, pngcompress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. There is also a heap-based buffer over-read...

The vulnerability of the Windows operating system’s image library, allowing a hacker to execute arbitrary code

The vulnerability of the Windows operating system’s image library relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Cryptography Next Generation (CNG) service on the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Cryptography Next Generation CNG service for the Windows operating system relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

CVE-2020-8844

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

NetHack Buffer Overflow Vulnerability (CNVD-2020-14202)

NetHack is a role-playing single-player game. A security vulnerability exists in NetHack. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write operations being performed to...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to an operation that allows data to be written beyond the buffer in memory, enabling attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are due to an operation that goes beyond the buffer in memory. Exploiting these vulnerabilities...

The vulnerability of the Intel Smart Sound Technology driver, related to a overflow in the unloaded pool in the operating memory, allows a hacker to execute arbitrary code.

The vulnerability of the Intel Smart Sound Technology driver is related to a overflow in the unloaded pool in the operating memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code with elevated privileges...

PT-2020-6853 · Unknown +6 · Cryptsetup +6

Name of the Vulnerable Software and Affected Versions: cryptsetup version 2.2.0 Description: A bug was found in the LUKS2 format validation code of cryptsetup, specifically in the segments validation code in the hdr validate segments function. This function is located in the file lib/luks2/luks2...

CVE-2019-10511

Possibility of memory overflow while decoding GSNDCP compressed mode PDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098,...

Design/Logic Flaw

Possibility of memory overflow while decoding GSNDCP compressed mode PDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098,...

CVE-2019-10511

CVE-2019-10511 concerns a memory overflow during GSNDCP compressed mode PDU decoding in Qualcomm Snapdragon components (Snapdragon Auto/Compute/IoT/Wearables and related Snapdragon variants). The issue affects a broad set of Qualcomm/Snapdragon platforms listed in the description (e.g., APQ8009, ...

CVE-2019-10511

Possibility of memory overflow while decoding GSNDCP compressed mode PDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098,...

Memory Overflow Vulnerability in CDT 9.9.0 for Eclipse 2019-09

The CDT project provides a full-featured C and C ++ IDE based on the Eclipse platform. Features include: support for a variety of toolchain project creation and hosted builds , standard make builds , source navigation , a variety of source knowledge tools , such as type hierarchies , call graphs ...

PT-2020-5627 · Qemu +6 · Qemu +6

Name of the Vulnerable Software and Affected Versions: QEMU versions 4.0 through 4.1.0 Description: The issue is related to the rom copy function in hw/core/loader.c, which does not properly validate the relationship between two addresses. This allows attackers to trigger an invalid memory copy...