CVE-2020-11759

An issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, an attacker can write to an out-of-bounds pointer...

CVE-2020-11759

An issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, an attacker can write to an out-of-bounds pointer...

PT-2020-6216 · Ilmbase +4 · Openexr +4

Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 2.4.1 Description: The issue is related to integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock functions, allowing an attacker to write to an out-of-bounds pointer...

Integer Overflows

WebKitGTK+ is vulnerable to integer overflows. It is due to a flaw in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari , allowing remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving Text objects...

Integer Overflows

Mozilla Firefox is vulnerable to Integer Overflows. Flaws in the way of processing of malformed web content allows a web page to contain malicious content, causing Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

Arbitrary Code Execution

netpbm is vulnerable to arbitrary code execution. The vulnerability exists as an input validation flaw and multiple integer overflows were discovered in the JasPer library providing support for JPEG-2000 image format and used in the jpeg2ktopam and pamtojpeg2k converters. An attacker could create...

Arbitrary Code Execution

netpbm is vulnerable to arbitrary code execution. The vulnerability exists as an input validation flaw and multiple integer overflows were discovered in the JasPer library providing support for JPEG-2000 image format and used in the jpeg2ktopam and pamtojpeg2k converters. An attacker could create...

Arbitrary Code Execution

gstreamer-plugins-good is vulnerable to arbitrary code execution. The vulnerability exists through multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mo...

Buffer Overflows

The Xen package is vulnerable to Buffer Overflows. A malicious local administrator of a guest domain could potentially trigger this flaw and execute arbitrary code outside of the domain...

CVE-2018-11218

Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows...

CVE-2017-18691

An issue was discovered on Samsung mobile devices with M6.0 and N7.0 Exynos8890 chipsets software. There are multiple Buffer Overflows in TSP sysfs cmdstore. The Samsung ID is SVE-2016-7500 January 2017...

CVE-2017-18681

An issue was discovered on Samsung Galaxy S5 mobile devices with software through 2016-12-20 Qualcomm AP chipsets. There are multiple buffer overflows in the bootloader. The Samsung ID is SVE-2016-7930 March 2017...

CVE-2017-18681

An issue was discovered on Samsung Galaxy S5 mobile devices with software through 2016-12-20 Qualcomm AP chipsets. There are multiple buffer overflows in the bootloader. The Samsung ID is SVE-2016-7930 March 2017...

CVE-2017-18681

CVE-2017-18681 affects the Samsung Galaxy S5 on software through 2016-12-20 (Qualcomm AP chipsets). The issue is described as multiple buffer overflows in the bootloader, with Samsung ID SVE-2016-7930 (March 2017). The connected Red Hat, CNVD, CNVD-like and CVE records corroborate a Samsung Galax...

CVE-2017-18691

An issue was discovered on Samsung mobile devices with M6.0 and N7.0 Exynos8890 chipsets software. There are multiple Buffer Overflows in TSP sysfs cmdstore. The Samsung ID is SVE-2016-7500 January 2017...

Videolabs libmicrodns Input Validation Error Vulnerability

Videolabs libmicrodns is a cross-platform mDNS multicast DNS resolver from Videolabs Labs in France. An input validation error vulnerability exists in the TXT record parsing feature of Videolabs libmicrodns 0.1.0. The vulnerability stems from a network system or product that does not properly...

CVE-2020-6073

An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing the RDATA section in a TXT record in mDNS messages, multiple integer overflows can be triggered, leading to a denial of service. An attacker can send an mDNS...

CVE-2020-6073

An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing the RDATA section in a TXT record in mDNS messages, multiple integer overflows can be triggered, leading to a denial of service. An attacker can send an mDNS...

CVE-2020-6073

An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing the RDATA section in a TXT record in mDNS messages, multiple integer overflows can be triggered, leading to a denial of service. An attacker can send an mDNS...

CVE-2020-6073

An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing the RDATA section in a TXT record in mDNS messages, multiple integer overflows can be triggered, leading to a denial of service. An attacker can send an mDNS...