Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the readWriteEpsMetadata function in the epsimage.cpp file. An attacker can cause a crash by tricking a user into processing a specially crafted EPS file. Note: This is only exploitable if metadata is being writte...

Linux Distros Unpatched Vulnerability : CVE-2019-20169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trakRead in isomedia/boxcodebase.c...

OSV-2025-684 Heap-buffer-overflow in TGAHandler::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=440585455 Crash type: Heap-buffer-overflow WRITE 4 Crash state: TGAHandler::read kimgiofuzzer.cc...

Linux Distros Unpatched Vulnerability : CVE-2018-20452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The readMSATbody function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service application crash or possibly have...

Linux Distros Unpatched Vulnerability : CVE-2020-29371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in romfsdevread in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd...

PT-2025-33758

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the platform/x86/intel/pmt component of the Linux kernel related to a NULL pointer dereference when using intel pmt read for binary sysfs. This occurs when a pcidev is...

SAP MDM Server 安全漏洞

SAP MDM Server is an MDM server from SAP, Germany. A security vulnerability exists in SAP MDM Server that stems from a memory read access violation triggered by the Read function when processing specially crafted packets, which could lead to an unexpected termination of the server process...

CVE-2017-13311

In the read function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interactio...

CVE-2025-47814

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflateread called indirectly from spvreadxmlmember in zip-reader.c. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

QuickJS 安全漏洞

QuickJS is a small and embeddable Javascript engine open-sourced by QuickJS. A security vulnerability exists in QuickJS 0.9.0 and earlier versions, which stems from a lack of length checking in JSReadString, and may result in a heap buffer overflow...

CVE-2025-32050

A flaw was found in libsoup. The libsoup appendparamquoted function may contain an overflow bug resulting in a buffer under-read...

CVE-2025-25799

SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the filegetcontents function at adminsafe.php...

CVE-2025-1371 GNU elfutils eu-read readelf.c handle_dynamic_symtab null pointer dereference

A vulnerability has been found in GNU elfutils 0.192 and classified as problematic. This vulnerability affects the function handledynamicsymtab of the file readelf.c of the component eu-read. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has...

The vulnerability of the ppp_read() and ppp_write() functions (drivers/net/ppp/ppp_generic.c) in the Linux operating system’s PPP kernel driver allows a hacker to cause a service failure.

The vulnerability of the pppread and pppwrite functions drivers/net/ppp/pppgeneric.c in the Linux kernel-based PPP driver is related to insufficient input data validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of Linux operating system’s DRM/AMDGPU cores allows a hacker to trigger a service failure.

The vulnerability of the DRM/AMDGPU cores of the Linux operating system is related to incorrect blocking of resources in the amdgpudebugfsmqdread function. Exploiting this vulnerability can allow a hacker to cause service failures...

CVE-2017-13311

In the read function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interactio...

The vulnerability of the NFS kernel component in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the NFS kernel component in Linux operating systems is related to incorrect blocking in the nfsnetfsissueread function. Exploiting this vulnerability can allow an attacker to cause a service failure...

OESA-2024-2312 openresty-openssl111 security update

Security Fixes: The function PEMreadbioex reads a PEM file from a BIO and parses and decodes the "name" e.g. "CERTIFICATE", any header data and the payload data. If the function succeeds then the "nameout", "header" and "data" arguments are populated with pointers to buffers containing the releva...

Malicious code in instaread (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 792748013463fb0303ff6033b47dcb48c23dc944d5075a8859b6997eafd47a56 The file bc2556d1c1ea2a2d00.js contains an AdWare LNKR, this file is included in readarticle.html template and effectively used when the user requests to see t...

UBUNTU-CVE-2024-9029

A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the readiptcprofile function in the Source/Metadata/IPTC.cpp file because the size of the profile is not being sanitized, causing a crash in the application linked to the library,...