CVE-2014-9784

Multiple buffer overflows in drivers/char/diag/diagdebugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28442449 and Qualcomm internal bug CR585147...

CVE-2014-9788

Multiple buffer overflows in the voice drivers in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28573112 and Qualcomm internal bug CR548872...

CVE-2014-9801

CVE-2014-9801 concerns Android components on Nexus 5 (Qualcomm) where multiple integer overflows in lib/libfdt/fdt_rw.c can be triggered by a crafted application to gain privileges. The issue is described as an Android internal bug 28822060 and a Qualcomm internal bug CR705078, affecting Qualcomm...

CVE-2014-9801

Multiple integer overflows in lib/libfdt/fdtrw.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28822060 and Qualcomm internal bug CR705078...

CVE-2014-9802

CVE-2014-9802: Concrete details found in CNVD-2016-04811 and related records show an integer overflow in lib/libfdt/fdt.c within the Qualcomm component on Android, affecting Nexus 5 and Nexus 7 (2013) devices. Root cause: integer overflow in the FDT parser leads to privilege escalation when proce...

CVE-2015-8891

Multiple integer overflows in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allow attackers to bypass intended access restrictions via a crafted image, aka Android internal bug 28842418 and Qualcomm internal bug CR813930...

CVE-2016-3758

CVE-2016-3758 affects Android’s DexClassLoader (libdex/OptInvocation.cpp). The issue is described as multiple buffer overflows that allow attackers to gain privileges via a crafted application providing a long filename. Affected are Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1...

CVE-2014-9802

Multiple integer overflows in lib/libfdt/fdt.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28821965 and Qualcomm internal bug CR705108...

CVE-2014-9784

Multiple buffer overflows in drivers/char/diag/diagdebugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28442449 and Qualcomm internal bug CR585147...

CVE-2016-3758

Removed by vendor...

Citrix ADC Networking and VLAN Best Practices

The ADC uses VLANs to determine which interface should be used for which traffic. In addition, ADC does not participate in Spanning Tree. Without the proper VLAN configuration, the ADC is unable to determine which interface to use and it can function more like a HUB than a switch or router in the...

Adobe Bridge Code Execution

The vulnerability of the Adobe Bridge file manager is related to buffer overflows in dynamic memory, caused by integer overflows. Exploiting this vulnerability allows a local attacker to execute arbitrary code...

RealPlayer Data Compromise

Multiple buffer overflows in RealNetworks RealPlayer allow malicious actors operating remotely to execute arbitrary code, using improperly constructed atoms “elst” or “stsz” in MP4 files...

Adobe Pepper Flash Data Compromise

Overfilling buffers in dynamic memory in Adobe Pepper Flash for Google Chrome allows attackers to execute arbitrary code...

Adobe AIR Data Compromise

Overfilling buffers in dynamic memory in Adobe AIR allows attackers to execute arbitrary code...

MGASA-2016-0238 Updated php packages fix security vulnerability

php-mbstring phpmbregexeregreplaceexec - double free CVE-2016-5768. php-mcrypt heap Overflow due to integer overflows CVE-2016-5769. php-SPL int/sizet confusion in SplFileObject::fread CVE-2016-5770. php-SPL Use After Free Vulnerability in PHP's GC algorithm and unserialize CVE-2016-5771. php-WDD...

GNU Bash Code Execution

A vulnerability in the GNU Bash software allows for buffer overflows due to errors related to the use of a one-off equivalent of conditional statements. This vulnerability exists in the readtokenword function of the parce.y library. Exploiting this vulnerability enables a malicious actor to cause...

Google Chrome DoS

Google Chrome browser contains a vulnerability related to multiple integer overflows in the data replacement function implemented in the CharacterData interface in core/dom/CharacterData.cpp of Blink. Exploiting this vulnerability allows malicious actors to cause service failures or otherwise...

Thunderbird Code Execution

Mozilla Thunderbird’s email client contains a vulnerability related to errors in the implementation of the TypedArrayObject.cpp class. These errors allow for zero-overflows when using ArrayBuffer objects. Exploiting this vulnerability enables malicious actors to execute arbitrary code or cause...

CVE-2016-3988

Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allow remote...