The vulnerability of the uncompress function in ImfZip.cpp of the OpenEXR library, which allows a hacker to trigger a service failure

The vulnerability of the uncompress function in the ImfZip.cpp library related to numerical processing errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Linux Boot component of the Android operating system from the CAF repository (Android for MSM, Firefox OS for MSM, QRD Android) allows a attacker to trigger a numerical overflow.

The vulnerability of the Linux Boot component of the Android operating system in the CAF repository Android for MSM, Firefox OS for MSM, QRD Android is related to the lack of checks for image size and offset. Exploiting this vulnerability could allow a local attacker to trigger a full overflow...

The vulnerability of the _isBidi function in the (bidi.c) library of Libidn2, which allows a hacker to cause a service failure or exert other effects.

The vulnerability of the isBidi function in the bidi.c library from Libidn2 is due to a numerical overflow condition. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures or other adverse effects...

The vulnerability of the media_server component (IHDCP.cpp) in the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the mediaserver component IHDCP.cpp in the Android operating system is caused by a numerical overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created application...

The vulnerability of the `xt_alloc_table_info` function in the kernel’s `net/netfilter/x_tables.c` file in the Linux operating system allows a hacker to escalate their privileges or cause service interruptions.

The vulnerability of the xtalloctableinfo function in the kernel’s net/netfilter/xtables.c file in the Linux operating system is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker, operating locally, to increase their privileges or cause a service failure memory...

CVE-2017-1000101

curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a...

Heap overflow

curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a...

CVE-2017-1000101

curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a...

CVE-2017-1000101

curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a...

The vulnerability of the Android operating system’s loader from the CAF repository allows a hacker to execute arbitrary code within the kernel context.

The vulnerability of the Android operating system’s loader from the CAF repository is caused by a numerical overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the kernel context...

The vulnerability of the audio driver of the mobile application MSM for the Android operating system allows a hacker to trigger a memory overflow in the buffer dynamic area.

The vulnerability of the Android mobile application’s audio driver relates to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to trigger a numerical overflow, followed by an overflow of the dynamic memory buffer. This occurs if the function name is too long...

URL globbing out of bounds read

curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a...

CVE-2017-1000101

curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a...

The vulnerability of the Android operating system allows a hacker to trigger other errors, which can lead to service failure.

The vulnerability of the Android operating system is caused by a numerical overflow. Exploiting this vulnerability can allow a remote attacker to trigger other errors, which may lead to service failure...

The vulnerability of the vmw_surface_define_ioctl function in the Linux operating system allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the vmwsurfacedefineioctl function in the Linux operating system is caused by a numerical overflow. Exploiting this vulnerability allows an attacker acting locally to cause a service failure or increase their privileges access to memory boundaries, system freezing through a...

The vulnerability of Qualcomm’s TrustZone microprogramming software technology allows a intruder to trigger a service failure or exert other effects on the system.

The vulnerability of Qualcomm’s TrustZone microprogramming software’s Android Secure Execution Environment from the CAF repository is due to a numerical overflow. Exploiting this vulnerability could allow an attacker to cause a system failure or otherwise affect the system...

The vulnerability of Qualcomm’s TrustZone microprogramming software technology allows attackers to enhance their privileges.

The vulnerability of the TrustZone technology a DRM sub-program of Qualcomm’s Secure Execution Environment for Android from the CAF repository is related to numerical processing errors. Exploiting this vulnerability could allow a remote attacker to gain increased privileges...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the MySQL database management system arises due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the system to become unresponsive or trigger service failures using specially...

The vulnerability of the OpenBSD operating system, which allows a hacker to execute arbitrary code

The vulnerability of the amapalloc1 function in the OpenBSD operating system is caused by a numerical overflow. Exploiting this vulnerability allows an attacker, operating locally, to execute arbitrary code with kernel privileges, using a value of a very large size...

The vulnerability of the GD Graphics Library, which allows attackers to cause unpredictable effects

The vulnerability of the gdio.c component of the GD Graphics Library arises due to a numerical overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause unpredictable effects by manipulating the number of horizontal and vertical elements in the image...