5483 matches found
CVE-2017-12454
CVE-2017-12454 affects the Binary File Descriptor (BFD) library (libbfd) in GNU Binutils up to version 2.29. The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c can be triggered by a crafted VMS Alpha file to cause an arbitrary memory read. This entry (CVE-2017-12454) is corroborated by connected...
Razer Synapse rzpnk.sys Driver Out-of-Bounds Read Vulnerability
Razer Synapse is a Razer device configuration software from Razer USA. A security vulnerability in the Razer Synapse rzpnk.sys driver allows remote attackers to exploit the vulnerability by submitting specially crafted IOCTL requests to read memory out-of-bounds, resulting in a denial-of-service...
CVE-2017-12142
In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file...
CVE-2017-12142
In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file...
CVE-2017-12142
In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file...
UBUNTU-CVE-2017-12142
In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file...
DEBIAN-CVE-2017-12142
In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file...
CVE-2017-12142
In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file...
CVE-2017-12142
CVE-2017-12142 affects ytnef 1.9.2, where an invalid memory read in SwapDWord (ytnef.c) allows a crafted file to cause a denial of service. The issue is documented across multiple sources (OSV, NVD, Nessus/NASL feeds) with Fedora’s update stream indicating ytnef-1.9.3 includes the fix. Remediatio...
CVE-2017-12142
In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file...
Sound eXchange 'read_samples' Function Denial of Service Vulnerability
Sound eXchange SoX is a set of open source audio processing tools. The tool supports playback, conversion and recording of multiple audio format files. A security vulnerability exists in the 'readsamples' function of the hcom.c file in SoX version 14.4.2. A remote attacker can exploit this...
gstreamer-plugins-good: Invalid memory read in gst_aac_parse_sink_setcaps
The gstaacparsesinksetcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted audio file...
gstreamer-plugins-bad-free: Invalid memory read in gst_ps_demux_parse_psm
The gstpsdemuxparsepsm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service invalid memory read and crash via vectors involving PSM parsing...
gstreamer-plugins-good: Invalid memory read in gst_avi_demux_parse_ncdt
The gstavidemuxparsencdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a ncdt sub-tag that "goes behind" the surrounding tag...
gstreamer: Invalid memory read in g_type_check_instance_is_fundamentally_a
The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...
Kernel: kvm: use after free in complete_emulated_mmio
arch/x86/kvm/emulate.c in the Linux kernel through 4.9.3 allows local users to obtain sensitive information from kernel memory or cause a denial of service use-after-free via a crafted application that leverages instruction emulation for fxrstor, fxsave, sgdt, and sidt...
chromium-browser: use after free in chrome apps
A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
chromium-browser: use after free in indexeddb
A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...