Skia - Incorrect Convexity Assumptions Leading to Buffer Overflows

I was looking into the root cause of https://bugs.chromium.org/p/chromium/issues/detail?id=850350. In that bug, due to precision errors, Skia generated a concave RRect, but declared it convex. Later, the RRect was transformed with an affine transform and used as a clipping region for drawing...

Authentication Bypass

openstack-keystone is vulnerable to authentication bypass. Remote authenticated users are able to retain access via an expired token due to the token driver storing timestamps with incorrect precision, which causes timestamp expiration time comparisons for tokens to fail...

CVE-2018-6153

A precision error in Skia in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page...

CVE-2018-6126

A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...

CVE-2018-6153

A precision error in Skia in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page...

Design/Logic Flaw

A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...

CVE-2018-6126

CVE-2018-6126 is a Skia-related heap/buffer overflow in Google Chrome prior to 67.0.3396.62. A precision error in Skia could allow a remote attacker to perform an out-of-bounds memory write via a crafted HTML page, enabling potential arbitrary code execution. Publicly, this vulnerability is track...

CVE-2018-6153

CVE-2018-6153 is a buffer/precision error in the Skia library used by Google Chrome prior to 68.0.3440.75. The issue allows a remote attacker who has already compromised the renderer process to perform an out-of-bounds memory write via a crafted HTML page, enabling potential arbitrary code execut...

CVE-2018-6153

Removed by vendor...

CVE-2018-20004

An issue has been found in Mini-XML aka mxml 2.12. It is a stack-based buffer overflow in mxmlwritenode in mxml-file.c via vectors involving a double-precision floating point number and the '' substring, as demonstrated by testmxml...

Stack overflow

An issue has been found in Mini-XML aka mxml 2.12. It is a stack-based buffer overflow in mxmlwritenode in mxml-file.c via vectors involving a double-precision floating point number and the '' substring, as demonstrated by testmxml...

UBUNTU-CVE-2018-20004

An issue has been found in Mini-XML aka mxml 2.12. It is a stack-based buffer overflow in mxmlwritenode in mxml-file.c via vectors involving a double-precision floating point number and the '' substring, as demonstrated by testmxml...

CVE-2018-20004

An issue has been found in Mini-XML aka mxml 2.12. It is a stack-based buffer overflow in mxmlwritenode in mxml-file.c via vectors involving a double-precision floating point number and the '' substring, as demonstrated by testmxml...

Mini-XML Buffer Overflow Vulnerability (CNVD-2019-09592)

Mini-XML is a small XML parsing library , without the need for large non-standard libraries to read XML data files or strings in the application . A stack buffer overflow vulnerability exists in mxmlwritenode in mxml-file.c in Mini-XML i.e., mxml 2.12, which can be exploited by an attacker to cau...

CVE-2018-20004: Out-of-bounds Write

An issue has been found in Mini-XML aka mxml 2.12. It is a stack-based buffer overflow in mxmlwritenode in mxml-file.c via vectors involving a double-precision floating point number and the ' ' substring, as demonstrated by testmxml...

PT-2018-15230

Name of the Vulnerable Software and Affected Versions Mini-XML version 2.12 Description A stack-based buffer overflow issue has been discovered. It occurs in the mxml write node function in mxml-file.c and can be triggered by vectors involving a double-precision floating point number and the ''...

Securing Smart Manufacturing with Connected Threat Defense

By David Tay, the CIO of Beyonics You’d be hard pushed to find any organization today not involved in digital transformation projects. But the manufacturing sector was arguably one of the first to the game. Back in 2011, the German government first coined the term Industry 4.0 to describe the...

The vulnerability of the Local Packet Transport Service (LPTS) component in Cisco ASR 9000 routers allows a hacker to trigger a service failure.

The vulnerability of the Local Packet Transport Service LPTS component of Cisco ASR 9000 routers is related to the lack of input verification using the Precision Time Protocol PTP. Exploiting this vulnerability allows a malicious actor to remotely trigger a service failure...

The vulnerability in the implementation of the Precision Time Protocol (PTP) in the network operating system of Cisco NX-OS on Cisco Nexus switches of the 5500, 5600, and 6000 series allows a attacker to cause a service failure.

The vulnerability of the Precision Time Protocol PTP implementation in the network operating system of Cisco NX-OS on Cisco Nexus series 5500, 5600, and 6000 switches is caused by errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service...

Heap Feng Shader: Exploiting SwiftShader in Chrome

Posted by Mark Brand, Google Project Zero On the majority of systems, under normal conditions, SwiftShader will never be used by Chrome - it’s used as a fallback if you have a known-bad “blacklisted” graphics card or driver. However, Chrome can also decide at runtime that your graphics driver is...