1629 matches found
OSV-2020-244 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20036 Crash type: Heap-buffer-overflow READ 2 Crash state: BEInt::operator unsigned short OT::IntType::operator unsigned int OT::IndexArray::addindexesto...
OSV-2020-233 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20022 Crash type: Heap-buffer-overflow READ 2 Crash state: BEInt::operator unsigned short OT::IntType::operator unsigned int decltype...
OSV-2020-188 Heap-buffer-overflow in BEInt<short, 2>::operator short
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20924 Crash type: Heap-buffer-overflow READ 2 Crash state: BEInt::operator short OT::IntType::operator int OT::TupleVarHeader::calculatescalar...
OSV-2020-174 Heap-buffer-overflow in int arrow::BitUtil::BitReader::GetBatch<short>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21166 Crash type: Heap-buffer-overflow WRITE 8 Crash state: int arrow::BitUtil::BitReader::GetBatch int arrow::util::RleDecoder::GetBatch parquet::internal::TypedRecordReaderparquet::PhysicalType...
OSV-2020-149 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator=
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21580 Crash type: Heap-buffer-overflow WRITE 1 Crash state: BEInt::operator= OT::IntType::operator= bool OT::ClassDefFormat1::serializehbzipiterthbsortedarraytOT::HBGlyphI...
OSV-2020-107 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20944 Crash type: Heap-buffer-overflow READ 2 Crash state: BEInt::operator unsigned short OT::IntType::operator unsigned int OT::gvar::getoffset...
OSV-2020-16 Heap-use-after-free in BEInt<unsigned short, 2>::operator unsigned short
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20906 Crash type: Heap-use-after-free READ 2 Crash state: BEInt::operator unsigned short OT::IntType::operator unsigned int OT::GlyphVarData::hasdata...
Security and Human Behavior (SHB) 2020
Today is the second day of the thirteenth Workshop on Security and Human Behavior. It's being hosted by the University of Cambridge, which in today's world means we're all meeting on Zoom. SHB is a small, annual, invitational workshop of people studying various aspects of the human side of...
Microsoft IIS Tilde Character Short File/Folder Name Disclosure
Microsoft Internet Information Server IIS suffers from a vulnerability which allows the detection of short names of files and directories which have en equivalent in the 8.3 version of the file naming scheme. By crafting specific requests containing the tilde '' character, an attacker could...
Apple iOS, iPadOS and watchOS Mail Component Buffer Overflow Vulnerability
Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple watchOS is an operating system for smartwatches.Apple iPadOS is an operating system for iPad tablets.Mail is one of the email components. A security vulnerability exists in the Mail...
Multiple Apple Products CoreText Component Input Validation Error Vulnerability
Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.CoreText is one of the typography engine components. A security vulnerability exists in the CoreText component of several Apple...
Indian IT Company Was Hired to Hack Politicians, Investors, Journalists Worldwide
A team of cybersecurity researchers today outed a little-known Indian IT firm that has secretly been operating as a global hackers-for-hire service or hacking-as-a-service platform. Based in Delhi, BellTroX InfoTech allegedly targeted thousands of high-profile individuals and hundreds of...
Vocational College Smart Campus Platform Has Logic Flaw Vulnerabilities
Vocational College Smart Campus Platform is a fully integrated large-scale application system for the management and teaching business characteristics of vocational colleges and universities, providing an integrated solution covering enrollment and employment, teaching and learning, student...
CVE-2020-12717
The COVIDSafe Australia app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manufacturer data that is too short. This occurs because of an erroneous OpenTrace manuData.subdata call. T...
DEBIAN-CVE-2020-12279
An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles equivalent filenames that exist because of NTFS short names. This may allow remote code execution when cloning a repository. This issue is similar to CVE-2019-1353...
UBUNTU-CVE-2020-12279
An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles equivalent filenames that exist because of NTFS short names. This may allow remote code execution when cloning a repository. This issue is similar to CVE-2019-1353...
Tencent Weishi app suffers from unauthorized access vulnerability
Tencent Weishi is a short video creation and sharing platform of China's Tencent tencent. Users can browse, create and share all kinds of short videos on Weishi, as well as share videos on Weishi to friends and social platforms. An unauthorized access vulnerability exists in the Tencent Weishi ap...
EulerOS 2.0 SP3 : gcc (EulerOS-SA-2020-1383)
According to the version of the gcc packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The std::randomdevice class in libstdc++ in the GNU Compiler Collection aka GCC before 4.9.4 does not properly handle short reads from blocking source...
