Lucene search
K

40 matches found

CNNVD
CNNVD
added 2022/08/01 12:0 a.m.12 views

Google Pixel 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. A denial of service vulnerability exists in Google Android, which can be exploited by an attacker to cause a denial of service due to failure to properly handle incoming error messages...

7.5CVSS5.8AI score0.00495EPSS
Exploits0References3
OSV
OSV
added 2021/03/31 2:15 p.m.2 views

DEBIAN-CVE-2021-23981

A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...

8.1CVSS8.3AI score0.01135EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2021/03/31 1:42 p.m.26 views

CVE-2021-23981

A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...

8.1CVSS9.2AI score0.01135EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2021/03/25 1:47 p.m.3 views

Mozilla: Texture upload into an unbound backing buffer resulted in an out-of-bound read

The Mozilla Foundation Security Advisory describes this issue as: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash...

8.1CVSS7.5AI score0.01135EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2021/03/25 12:56 p.m.3 views

Mozilla: Texture upload into an unbound backing buffer resulted in an out-of-bound read

The Mozilla Foundation Security Advisory describes this issue as: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash...

8.1CVSS7.5AI score0.01135EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2021/03/25 12:53 p.m.3 views

Mozilla: Texture upload into an unbound backing buffer resulted in an out-of-bound read

The Mozilla Foundation Security Advisory describes this issue as: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash...

8.1CVSS7.5AI score0.01135EPSS
Exploits0References5
Veracode
Veracode
added 2021/03/25 1:22 a.m.21 views

Denial Of Service (DoS)

firefox is vulnerable to denial of service DoS. The vulnerability exists through a texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash...

8.1CVSS1.9AI score0.01135EPSS
Exploits0References7Affected Software9
OSV
OSV
added 2021/03/24 12:0 a.m.3 views

UBUNTU-CVE-2021-23981

A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...

8.1CVSS7.4AI score0.01135EPSS
Exploits0References8
CNNVD
CNNVD
added 2021/03/23 12:0 a.m.0 views

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an out-of-bounds read vulnerability. An attacker can exploit this vulnerability by uploading a pixel buffer object to cause memory corruption and an information leak or cra...

8.8CVSS8.5AI score0.01404EPSS
Exploits0References23
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.3 views

Google Android Buffer Error Vulnerability

Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android Pixel has a security vulnerability, there is currently no information about this vulnerability, please stay tuned to CNNVD or the manufacturer's announcement...

4.4CVSS5.8AI score0.00149EPSS
Exploits0References3
Talos
Talos
added 2019/07/29 12:0 a.m.174 views

SDL_image XCF Image Code Execution Vulnerability

Summary An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2image 2.0.4. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability. Tested...

8.8CVSS8.7AI score0.03616EPSS
Exploits0
Prion
Prion
added 2018/06/11 9:29 p.m.15 views

Buffer overflow

WebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while it is still in use. This can result in the WebRTC encoder using uninitialized memory, leading to a potentially exploitable crash. This vulnerability affects Firefox 60...

5CVSS7.8AI score0.02689EPSS
Exploits0References5Affected Software2
Cvelist
Cvelist
added 2018/06/11 9:0 p.m.14 views

CVE-2018-5160

WebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while it is still in use. This can result in the WebRTC encoder using uninitialized memory, leading to a potentially exploitable crash. This vulnerability affects Firefox 60...

6AI score0.02689EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2018/06/11 9:0 p.m.18 views

CVE-2018-5160

WebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while it is still in use. This can result in the WebRTC encoder using uninitialized memory, leading to a potentially exploitable crash. This vulnerability affects Firefox 60...

7.5CVSS9AI score0.02689EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2018/05/10 6:22 a.m.25 views

CVE-2018-5160

WebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while it is still in use. This can result in the WebRTC encoder using uninitialized memory, leading to a potentially exploitable crash. This vulnerability affects Firefox 60...

7.5CVSS2.6AI score0.02689EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2017/08/01 2:33 p.m.50 views

tigervnc: Buffer overflow in ModifiablePixelBuffer::fillRect

A buffer overflow flaw, leading to memory corruption, was found in TigerVNC viewer. A remote malicious VNC server could use this flaw to crash the client vncviewer process resulting in denial of service...

9.8CVSS6AI score0.04247EPSS
Exploits0References4
OSV
OSV
added 2016/05/30 12:0 a.m.12 views

DSA-3589-1 gdk-pixbuf - security update

Bulletin has no description...

9.3CVSS7.5AI score0.03868EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2015/10/26 12:0 a.m.40 views

Debian DSA-3378-1 : gdk-pixbuf - security update

Several vulnerabilities have been discovered in gdk-pixbuf, a toolkit for image loading and pixel buffer manipulation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2015-7673 Gustavo Grieco discovered a heap overflow in the processing of TGA images whi...

6.8CVSS8.2AI score0.05796EPSS
Exploits0References7
OpenVAS
OpenVAS
added 2015/10/24 12:0 a.m.36 views

Debian Security Advisory DSA 3378-1 (gdk-pixbuf - security update)

Several vulnerabilities have been discovered in gdk-pixbuf, a toolkit for image loading and pixel buffer manipulation. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-7673 Gustavo Grieco discovered a heap overflow in the processing of TGA images which...

6.8CVSS0.3AI score0.05796EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2015/10/23 12:0 a.m.30 views

Debian: Security Advisory (DSA-3378-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS7.6AI score0.05796EPSS
Exploits0References3
Rows per page
Query Builder