CVE-2017-11358

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

Memory corruption

An invalid memory read vulnerability was found in the function OpCode called from isLogicalOp and decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11731

An invalid memory read vulnerability was found in the function OpCode called from isLogicalOp and decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

UBUNTU-CVE-2017-11731

An invalid memory read vulnerability was found in the function OpCode called from isLogicalOp and decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11731

An invalid memory read vulnerability was found in the function OpCode called from isLogicalOp and decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11731

CVE-2017-11731 affects Ming 0.4.8 (libming) and is an invalid memory read in OpCode (used by isLogicalOp and decompileIF in util/decompile.c) that enables denial of service via a crafted file. Connected sources enumerate multiple Ming-related CVEs in 0.4.8 and document memory/buffer over-read and...

CVE-2017-11731

An invalid memory read vulnerability was found in the function OpCode called from isLogicalOp and decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

PT-2017-12208

Name of the Vulnerable Software and Affected Versions Ming version 0.4.8 Description A denial of service issue was discovered due to an invalid memory read in the OpCode function, which is called from isLogicalOp and decompileIF in util/decompile.c. This issue can be triggered by attackers using ...

LAME Denial of Service Vulnerability (CNVD-2017-20145)

LAME is LAME team developed a set of open source MP3 audio compression software . A denial of service vulnerability exists in the 'fillbufferresample' function in the libmp3lame/util.c file in LAME version 3.99.5. A remote attacker can exploit this vulnerability with a specially crafted wav file ...

PT-2017-16297

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Description The issue is related to insufficient validation of untrusted input in Skia, a component of Google Chrome, which allowed a remote attacker to perform an out of bounds memory read via a...

Code injection

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

DEBIAN-CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

CVE-2017-9412: Improper Restriction of Operations within the Bounds of a Memory Buffer

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

PT-2017-18902

Name of the Vulnerable Software and Affected Versions LAME version 3.99.5 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid memory read and application crash, by using a crafted wav file. This is due to a problem in the unpack read samples functio...

CVE-2017-5091

A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-5097

Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-5098

A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

MGASA-2017-0220 Updated libquicktime packages fix security vulnerabilities

A DoS in quicktimereadmoov function in moov.c via acrafted mp4 file was fixed CVE-2017-9122. An invalid memory read in lqtframeduration via a crafted mp4 file was fixed CVE-2017-9123. A NULL pointer dereference in quicktimematch32 via a crafted mp4 file was fixed CVE-2017-9124. A DoS in...

PT-2017-16298

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera versions prior to 60.0.3112.78 Description A use after free in V8 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. This issue affects Google Chrome an...