Google Android Qualcomm sound codec driver elevation of privilege vulnerability

AndroidonPixel and PixelXL is an open source Linux-based operating system for the Pixel and PixelXL developed by Google and the Open Handheld Alliance OHA.Qualcommsoundcodecdriver is one of the sound decoder Qualcommsoundcodecdriver is one of the sound decoder driver components. An elevation of...

CVE-2017-8906: Integer Underflow (Wrap or Wraparound)

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the x265encoderencode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in th...

Google Android Synaptics touchscreen driver information disclosure vulnerability

Android on Pixel and Pixel XL is a Linux-based open source operating system for the Pixel and Pixel XL smartphones developed by Google and the Open Handheld Alliance OHA, of which Synaptics touchscreen Driver is one. Synaptics touchscreen Driver is one of the touchscreen drivers. An information...

Android Qualcomm sound driver elevation of privilege vulnerability (CNVD-2017-06114)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm Sound Driver is a sound driver developed by Qualcomm. The Qualcomm sound driver in Android on Pixel and Pixel XL devices is vulnerable to a power lifting vulnerability. An...

Android Qualcomm bootloader boost vulnerability

Android on Google Pixel XL, etc. is an open source Linux-based operating system for Google Pixel XL, etc. smart devices developed by Google Inc. and the Open Handheld Alliance OHA.Qualcomm bootloader is one of the programs used in the... Qualcomm bootloader is a bootloader developed by Qualcomm...

Source Code for CIA’s Tool to Track Whistleblowers Leaked by Wikileaks

Wikileaks has just published a new batch of the Vault 7 leak, exposing the documentation and source code for a CIA project known as "Scribbles." Scribbles, a.k.a. the "Snowden Stopper," is a piece of software allegedly designed to embed 'web beacon' tags into confidential documents, allowing the...

UBUNTU-CVE-2017-5465

An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and...

CVE-2016-7515

The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via vectors related to the number of pixels...

DEBIAN-CVE-2015-8504

Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service arithmetic exception and application crash via crafted SetPixelFormat messages from a client...

Google Pixel C elevation of privilege vulnerability

Google Pixel C is a tablet.NVIDIA GPU driver is an NVIDIA graphics processor driver component used in it. Google Pixel C has an elevation of privilege vulnerability that can be exploited by an attacker to gain elevation of privilege...

ImageWorsener 'iwgif_record_pixel()' function remote heap buffer overflow vulnerability

ImageWorsener is a cross-platform command line utility and library for image scaling and other image processing. It has full support for PNG, JPEG, and BMP formats, experimental support for WebP, read-only support for GIF, and limited support for some other image formats. A remote heap buffer...

PT-2017-17747

Name of the Vulnerable Software and Affected Versions ImageWorsener version 1.3.0 Description The issue allows remote attackers to cause a denial of service, specifically a heap-based buffer over-read, by providing a crafted file. This is due to a problem in the iwgif record pixel function...

PT-2017-17746

Name of the Vulnerable Software and Affected Versions ImageWorsener version 1.3.0 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by providing a crafted file. This is due to a problem in the iwgif record pixel function...

CVE-2017-5507

Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service memory consumption via vectors involving a pixel cache...

DEBIAN-CVE-2017-5507

Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service memory consumption via vectors involving a pixel cache...

Memory corruption

Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service memory consumption via vectors involving a pixel cache...

CVE-2017-5507

Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service memory consumption via vectors involving a pixel cache...

EUVD-2017-14611

Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service memory consumption via vectors involving a pixel cache...

CVE-2017-5507

Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service memory consumption via vectors involving a pixel cache...

CVE-2017-5507: Missing Release of Resource after Effective Lifetime

Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service memory consumption via vectors involving a pixel cache...