9348 matches found
UBUNTU-CVE-2019-20387
repodataschema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema...
CVE-2020-7059
When using fgetss function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash...
PT-2020-10413 · Opensuse +3 · Libsolv +3
Name of the Vulnerable Software and Affected Versions: libsolv versions prior to 0.7.6 Description: The issue is related to a heap-based buffer over-read in the repodata schema2id function in repodata.c. This occurs when the length of the last schema is less than the length of the input schema...
PT-2020-2006 · Php +7 · Php +7
Name of the Vulnerable Software and Affected Versions: PHP versions 7.2.x through 7.2.26 PHP versions 7.3.x through 7.3.13 PHP versions 7.4.x through 7.4.1 Description: The issue is related to the fgetss function in PHP, which can be exploited to read past the allocated buffer when used to read...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2017/Adobe Acrobat Reader 2017 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow an attacker to...
The vulnerability of the Gauss100 OLTP database in the ManageOne data center management system allows a hacker to cause a service failure.
The vulnerability of the Gauss100 OLTP database in the ManageOne data center management system is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using specially crafted packets...
UBUNTU-CVE-2020-6628
Ming aka libming 0.4.8 has a heap-based buffer over-read in the function decompileSWITCH in decompile.c...
DEBIAN-CVE-2020-6624
jhead through 3.04 has a heap-based buffer over-read in processDQT in jpgqguess.c...
DEBIAN-CVE-2020-6625
jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c...
UBUNTU-CVE-2020-6624
jhead through 3.04 has a heap-based buffer over-read in processDQT in jpgqguess.c...
UBUNTU-CVE-2020-6625
jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c...
PT-2020-19191 · Mats Peterson +5 · Jhead +5
Name of the Vulnerable Software and Affected Versions: jhead versions 3.04 and earlier Description: The issue is a heap-based buffer over-read in the process DQT function located in jpgqguess.c. This occurs in the processing of certain data. Recommendations: For versions 3.04 and earlier, at the...
CVE-2020-6622
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...
CVE-2020-6621
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT...
UBUNTU-CVE-2020-6622
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...
UBUNTU-CVE-2020-6620
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufget8...
UBUNTU-CVE-2020-6618
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttfindtable...
The vulnerability of Huawei’s microprogrammed router software, related to reading data beyond the buffer in memory, allows attackers to cause service failures.
The vulnerability of Huawei’s microprogrammed router software relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
PT-2020-19181 · Gnu +1 · Gnu Libredwg +1
Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.9.3.2564 Description: The issue is related to a heap-based buffer over-read in the bfr read function located in decode.c. Recommendations: For GNU LibreDWG version 0.9.3.2564, consider updating to a newer version that...