GnuCOBOL Buffer Overflow Vulnerability (CNVD-2019-26279)

GnuCOBOL is a COBOL language compiler. A buffer overflow vulnerability exists in the 'cbencodeprogramid' function of the cobc/typeck.c file in GnuCOBOL version 2.2. The vulnerability stems from a networked system or product performing operations in memory without properly validating data...

FreeType buffer overflow vulnerability (CNVD-2019-26254)

FreeType is an open source font rendering library written in the C language. A buffer overflow vulnerability exists in the type1/t1parse.c file in versions of FreeType prior to 2.6.1. The vulnerability stems from a networked system or product performing operations in memory without properly...

Free Lossless Image Format Buffer Overflow Vulnerability

Free Lossless Image Format FLIF is a lossless image format. A buffer overflow vulnerability exists in imagesavepng in the image/image-png.cpp file in FLIF version 0.3. The vulnerability stems from a networked system or product performing operations in memory without properly validating data...

aubio buffer overflow vulnerability

aubio is a tool for extracting annotations from audio signals. The product offers digital filters, phase vocoders, pitch tracking and transient/steady state separation. A buffer overflow vulnerability exists in aubio 0.4.8 and prior versions of tempo. The vulnerability stems from a networked syst...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux Linux_Kernel

poc for https:...

The vulnerability of the a2p utility in the Perl package, related to the operation of writing data beyond the buffer boundaries in memory, allows an attacker to cause a service failure.

The vulnerability of the a2p utility from the Perl package is related to the execution of a write operation beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure by passing a specially crafted file as an argument to the command line...

ProClima Buffer Overflow Vulnerability

Schneider Electric ProClima is a heat calculation software package from Schneider Electric, France. The software provides thermal management capabilities for environmental and electrical/electronic equipment installed in control panels by analyzing specified thermal data. A buffer overflow...

Linaro OP-TEE Buffer Overflow Vulnerability

Linaro OP-TEE is an open source trusted execution environment from Linaro UK. A buffer overflow vulnerability exists in opteeos in Linaro OP-TEE 3.3.0 and earlier versions. The vulnerability stems from a networked system or product performing operations on memory without properly validating data...

TRENDnet TEW-827DRU Stack Buffer Overflow Vulnerability

The TRENDnet TEW-827DRU is a wireless router from TRENDnet. A buffer overflow vulnerability exists in the TRENDnet TEW-827DRU using firmware version 2.04B03 and earlier. The vulnerability originates when a network system or product performs an operation on memory without properly validating data...

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-16202)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

Microsoft Edge Buffer Overflow Vulnerability

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A buffer overflow vulnerability exists in the way the Chakra scripting engine in Microsoft Edge handles in-memory objects. The vulnerability originates when a web system or product perfor...

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27400)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

Adobe Media Encoder Buffer Overflow Vulnerability

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. A buffer overflow vulnerability exists in version 13.0.2 of Adobe Media Encoder for Windows and macOS-based platforms, which originates when a networked system or product performs an operation ...

Kaspersky Lab Antivirus Engine Heap Buffer Overflow Vulnerability

Kaspersky Lab Antivirus Engine is an anti-virus engine from the Russian laboratory Kaspersky. A heap buffer overflow vulnerability exists in versions prior to Kaspersky Lab Antivirus Engine 04.apr.2019. The vulnerability originates when a networked system or product performs an operation on memor...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Firefox

CVE-2019-9810 Exploit for Firefox on Windows CVE-2019-9810 is...

The vulnerability of the “read” function in PHP’s DNS_get_record interpreter, related to reading data beyond the boundaries of the memory buffer, allows attackers to access confidential data.

The vulnerability of the “read” function in the PHP language interpreter’s dnsgetrecord function relates to reading data beyond the boundaries of the allocated memory buffer. Exploiting this vulnerability could allow an attacker to gain access to confidential data during the processing of DNS...

The vulnerability of the xml_elem_parse_buf() function in the PHP programming language lies in its ability to read data beyond the boundaries of the memory buffer, allowing an attacker to gain unauthorized access to protected data.

The vulnerability of the xmlelemparsebuf function ext/xmlrpc/libxmlrpc/xmlelement.c in the PHP interpreter is related to reading data beyond the boundaries of the memory buffer. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected data...

GPAC Buffer Overflow Vulnerability (CNVD-2019-13566)

GPAC is an open source multimedia framework. A buffer error vulnerability exists in GPAC version 0.7.1. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write operations being...

IBM DB2 Stack Buffer Overflow Vulnerability

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A stack-based buffer overflow vulnerability exists in IBM DB2 libdb2e.so.1, which originates when a...

Google Android Qualcomm Closed Source Component Resource Depletion Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A resource exhaustion vulnerability exists in the Qualcomm closed-source component in Android. An attacker can exploit the vulnerability to cause invalid indexes to exceed bound memory accesses...