16409 matches found
CVE-2019-20630
An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in BSReadByte called from gfbsreadbit in utils/bitstream.c that can cause a denial of service via a crafted MP4 file...
CVE-2019-20630
An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in BSReadByte called from gfbsreadbit in utils/bitstream.c that can cause a denial of service via a crafted MP4 file...
Heap overflow
An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in BSReadByte called from gfbsreadbit in utils/bitstream.c that can cause a denial of service via a crafted MP4 file...
CVE-2019-20629
An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...
UBUNTU-CVE-2019-20630
An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in BSReadByte called from gfbsreadbit in utils/bitstream.c that can cause a denial of service via a crafted MP4 file...
CVE-2019-20540
An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. There is a buffer over-read and possible information leak in the core touch screen driver. The Samsung ID is SVE-2019-14942 November 2019...
CVE-2019-20629
GPAC prior to 0.8.0 contains a heap-based buffer over-read in gf_m2ts_process_pmt (media_tools/mpegts.c) within libgpac.a, exploitable via crafted MP4 files to cause a denial of service. This affects GPAC/MP4Box builds using the libgpac.a component. Remediation: upgrade GPAC to version 0.8.0 or l...
CVE-2019-20629
An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...
CVE-2019-20630
An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in BSReadByte called from gfbsreadbit in utils/bitstream.c that can cause a denial of service via a crafted MP4 file...
CVE-2019-20630
Removed by vendor...
CVE-2019-20630
GPAC before version 0.8.0 (libgpac.a) is affected by CVE-2019-20630 due to a heap-based buffer over-read in BS_ReadByte (called from gf_bs_read_bit) within utils/bitstream.c. This can lead to denial of service when processing a crafted MP4 file. Multiple connected sources confirm the same issue a...
CVE-2019-20540
CVE-2019-20540 affects Samsung mobile devices running N(7.x), O(8.x), and P(9.0) Exynos software. The issue is a buffer over-read in the core touch screen driver that can lead to a possible information leak. Connected sources corroborate the same description; no explicit patch/version details or ...
CVE-2019-20540
An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. There is a buffer over-read and possible information leak in the core touch screen driver. The Samsung ID is SVE-2019-14942 November 2019...
CVE-2017-16914
The "stubsendretsubmit" function drivers/usb/usbip/stubtx.c in the Linux kernel can allow an attacker to cause a denial of service NULL pointer dereference via a specially crafted USB over IP packet...
CVE-2019-15058
stbimage.h aka the stb image loader 2.23 has a heap-based buffer over-read in stbitgaload, leading to Information Disclosure or Denial of Service...
CVE-2018-12633
An issue was discovered in the Linux kernel through 4.17.2. vbgmiscdeviceioctl in drivers/virt/vboxguest/vboxguestlinux.c reads the same user data twice with copyfromuser. The header part of the user data is double-fetched, and a malicious user thread can tamper with the critical variables...
EulerOS 2.0 SP5 : ghostscript (EulerOS-SA-2020-1306)
According to the version of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The InsMIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service heap-based...
EulerOS 2.0 SP5 : ruby (EulerOS-SA-2020-1324)
According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions.CVE-2019-15845 - Ruby...