9329 matches found
ALPINE-CVE-2018-14498
get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries...
PT-2019-5750 · Poppler +4 · Poppler +4
Name of the Vulnerable Software and Affected Versions: Poppler version 0.74.0 Description: The issue is related to a heap-based buffer over-read in the downsample row box filter function located in CairoRescaleBox.cc. This can potentially allow a remote attacker to access confidential data,...
The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, relates to reading data beyond the buffer in memory. This allows attackers to gain access to protected information.
The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, stems from the reading of data beyond the buffer in memory. Exploitation of this vulnerability can allow an attacker to gain access to protected information by using a specially created...
DEBIAN-CVE-2019-9210
In AdvanceCOMP 2.1, pngcompress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. There is also a heap-based buffer over-read...
AZL-6303 CVE-2019-9210 affecting package advancecomp for versions less than 2.1-14
In AdvanceCOMP 2.1, pngcompress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. There is also a heap-based buffer over-read...
PT-2019-5304 · Advancecomp +4 · Advancecomp +4
Name of the Vulnerable Software and Affected Versions: AdvanceCOMP version 2.1 Description: The issue is caused by an integer overflow in the png compress function in pngex.cc of the AdvanceCOMP utility. This overflow occurs when encountering an invalid PNG size, leading to an attempted memcpy in...
UBUNTU-CVE-2019-9210
In AdvanceCOMP 2.1, pngcompress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. There is also a heap-based buffer over-read...
UBUNTU-CVE-2019-9169
In the GNU C Library aka glibc or libc6 through 2.29, proceednextnode in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match...
DEBIAN-CVE-2019-9169
In the GNU C Library aka glibc or libc6 through 2.29, proceednextnode in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match...
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a...
MATIO stack buffer overread vulnerability (CNVD-2019-28418)
matio is a C library for reading and writing MATLAB MAT files. A stack buffer over-read vulnerability exists in the "Rank and Dimension" feature of the ReadNextCell function in mat5.c in libmatio.a in matio 1.5.13. No details of the vulnerability are available at this time...
MATIO stack buffer overread vulnerability (CNVD-2019-28417)
matio is a C library for reading and writing MATLAB MAT files. A stack buffer over-read vulnerability exists in the memcpy of the ReadNextCell function in mat5.c in libmatio.a in matio 1.5.13. No details of the vulnerability are provided at this time...
MATIO stack buffer overread vulnerability (CNVD-2019-28421)
matio is a C library for reading and writing MATLAB MAT files. A stack buffer over-read vulnerability exists in the MatVarReadNextInfo5 function in mat5.c in libmatio.a in matio 1.5.13. No detailed vulnerability details are provided at this time...
MATIO stack buffer overread vulnerability (CNVD-2019-28412)
matio is a C library for reading and writing MATLAB MAT files. A stack buffer over-read vulnerability exists in the InflateDimensions function in libmatio.a in matio 1.5.13 when called from ReadNextCell in mat5.c. No details of the vulnerability are provided at this time...
DEBIAN-CVE-2019-9070
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in dexpression1 in cp-demangle.c after many recursive calls...
PT-2020-10802 · Philip Hazel +10 · Pcre +10
Name of the Vulnerable Software and Affected Versions: PCRE versions prior to 8.43 Description: The issue allows a subject buffer over-read in JIT when UTF is disabled, and X or R has more than one fixed quantifier. Recommendations: For versions prior to 8.43, update to version 8.44 or later to...
DEBIAN-CVE-2019-9037
An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a buffer over-read in the function MatVarPrint in mat.c...
UBUNTU-CVE-2019-9035
An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a stack-based buffer over-read in the function ReadNextStructField in mat5.c...