The vulnerability in the implementation of the WebRTC technology in Google Chrome browser allows a hacker to induce a service failure.

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

tcpdump: Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap

In tcpdump 4.9.2, a stack-based buffer over-read exists in the printprefix function of print-hncp.c via crafted packet data because of missing initialization...

DEBIAN-CVE-2019-19246

Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in strlowercasematch in regexec.c...

UBUNTU-CVE-2019-19246

Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in strlowercasematch in regexec.c...

The vulnerability of the mp4ff_read_stsc function (common/mp4ff/mp4atom.c) in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to trigger a service denial.

The vulnerability of the mp4ffreadstsc function in the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created mp4 fi...

The vulnerability of the LoaderTiff::getData() function in the Exiv2 library for managing media metadata allows a hacker to execute arbitrary code.

The vulnerability of the LoaderTiff::getData function preview.cpp in the Exiv2 media metadata management library is exploited by reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the mp4ff_read_stsd function (common/mp4ff/mp4atom.c) in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to trigger a service denial.

The vulnerability of the mp4ffreadstsd function common/mp4ff/mp4atom.c in the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is caused by reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created...

The vulnerability of the ParseJSS component in the VideoLAN VLC media player software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ParseJSS component in the VideoLAN VLC media player software arises from reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

The vulnerability of the mp4ff_read_stts function (common/mp4ff/mp4atom.c) in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to trigger a service failure.

The vulnerability of the mp4ffreadstts function common/mp4ff/mp4atom.c in the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is caused by reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created...

DEBIAN-CVE-2019-19204

An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as fetchrangequantifier in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read...

DEBIAN-CVE-2019-19203

An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function gb18030mbcenclen in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read...

UBUNTU-CVE-2019-19204

An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as fetchrangequantifier in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read...

CVE-2019-16200

GNU Serveez through 0.2.2 has an Information Leak. An attacker may send an HTTP POST request to the /cgi-bin/reader URI. The attacker must include a Content-length header with a large positive value that, when represented in 32 bit binary, evaluates to a negative number. The problem exists in the...

The vulnerability of the ReadSUNImage function (coders/sun.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to trigger a service failure.

The vulnerability of the ReadSUNImage function coders/sun.c in the cross-platform library for working with graphics, GraphicsMagick, arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a system failure...

The vulnerability of the ReadSUNImage function (coders/sun.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to execute arbitrary code.

The vulnerability of the ReadSUNImage function coders/sun.c in the cross-platform library for working with graphics, GraphicsMagick, is related to reading beyond the buffer boundaries in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the WriteOnePNGImage function (coders/png.c) in the cross-platform graphics library GraphicsMagick, which allows a hacker to trigger a service failure.

The vulnerability of the WriteOnePNGImage function coders/png.c in the cross-platform graphics library GraphicsMagick is related to reading beyond the buffer boundaries in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure by using a specially...

The vulnerability of the ReadMNGImage function (coders/png.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to execute arbitrary code.

The vulnerability of the ReadMNGImage function coder/png.c in the cross-platform library for working with graphics, GraphicsMagick, is related to reading beyond the buffer boundaries in dynamic memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

DEBIAN-CVE-2019-19035

jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and processSOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file...

CVE-2019-19035

jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and processSOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file...

DEBIAN-CVE-2019-18849

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup...