Vulnerability warning | bucket pixel technology found in high-risk Struts2 showcase remote code execution vulnerability S2-048-the vulnerability warning-the black bar safety net

Recently, from the bucket as technology Tophant security researcher icez found Struts2 showcase application in the presence of a remote code execution high-risk vulnerabilities. Struts2 official has confirmed the vulnerability, the vulnerability number S2-048, CVE number: CVE-2017-9791, the...

Millions of Android Devices Using Broadcom Wi-Fi Chip Can Be Hacked Remotely

Google has released its latest monthly security update for Android devices, including a serious bug in some Broadcom Wi-Fi chipsets that affects millions of Android devices, as well as some iPhone models. Dubbed BroadPwn, the critical remote code execution vulnerability resides in Broadcom's...

DEBIAN-CVE-2017-10794

When GraphicsMagick 1.3.25 processes an RGB TIFF picture with metadata indicating a single sample per pixel in coders/tiff.c, a buffer overflow occurs, related to QuantumTransferMode...

Google Android integer overflow vulnerability (CNVD-2017-16015)

Android on Pixel and Pixel XL is an open source Linux-based operating system for the Pixel and Pixel XL smartphones developed by Google and the Open Handheld Alliance OHA. An integer overflow vulnerability exists in TrustZone in Android on Pixel and Pixel XL devices. An attacker can exploit this...

ALPINE-CVE-2017-9994

libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pixfmt is set, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecifie...

ImageMagick coders/mpc.c Heap Buffer Overflow DoS

The vulnerability of the coders/mpc.c component in the console-based graphic editor ImageMagick is related to a memory leak. Exploiting this vulnerability allows an attacker to cause a service failure memory consumption by using vectors that include pixel cache...

ImageMagick Denial of Service Vulnerability (CNVD-2017-09693)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'SetPixelChannelAttributes' function in ImageMagick version 7.0.5-7 Q1...

Android Security Bulletin—June 2017Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of June 05, 2017 or later address all of these issues. Refer to the Pixel and Nexus update schedule to learn how to check a device's security patch level. Partners were...

Google Pixel Qualcomm Sound Codec Driver Elevation of Privilege Vulnerability

Google Pixel is a smartphone from the American company Google Google. An elevation of privilege vulnerability exists in the Google Pixel Qualcomm Sound Codec Driver. An attacker can exploit the vulnerability to execute arbitrary code using elevated kernel privileges...

Google Android Qualcomm Wi-Fi Driver Denial of Service Vulnerability (CNVD-2017-10594)

Google Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Qualcomm Wi-Fi Driver is a wifi driver. A denial of service vulnerability exists in the Qualcomm Wi-Fi Driver in Android on Nexus 5X, Pixel and Pixel XL devices. An attacker...

Google Pixel/Pixel XL Qualcomm Video Driver Information Disclosure Vulnerability

Google Pixel/Pixel XL are both a smartphone from the American company Google Google. Google Pixel/Pixel XL suffers from an information disclosure vulnerability. The vulnerability can be exploited by an attacker to gain access to potentially sensitive information, leading to further attacks...

Google Pixel/Pixel XL Qualcomm USB Driver Information Disclosure Vulnerability

Google Pixel/Pixel XL are both a smartphone from the American company Google Google. Google Pixel/Pixel XL suffers from an information disclosure vulnerability. The vulnerability can be exploited by an attacker to gain access to potentially sensitive information, leading to further attacks...

UBUNTU-CVE-2017-9111

In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code...

MulticoreWare x265 Integer Overflow Vulnerability

MulticoreWare x265 is a HEVC encoder developed by MulticoreWare USA. An integer overflow vulnerability exists in pixel-a.asm in MulticoreWare x265 version 2.4 and earlier. An attacker can exploit this vulnerability to cause a denial of service to the encrypted process with the help of a smaller...

CVE-2017-8906

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the x265encoderencode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in th...

UBUNTU-CVE-2017-8906

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the x265encoderencode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in th...

Integer overflow

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the x265encoderencode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in th...

CVE-2017-8906

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the x265encoderencode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in th...

CVE-2017-8906

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the x265encoderencode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in th...

CVE-2017-8906

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the x265encoderencode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in th...