OSV-2020-800 UNKNOWN READ in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24051 Crash type: UNKNOWN READ Crash state: std::1::tree, std::1...

CVE-2020-12406

Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary code. This vulnerability affects Thunderbird 68.9.0, Firefox 77, and Firefox ESR 68.9...

OSV-2020-690 UNKNOWN READ in ot::Coap::CoapBase::RemoveResource

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13369 Crash type: UNKNOWN READ Crash state: ot::Coap::CoapBase::RemoveResource ot::MeshCoP::BorderAgent::Stop ot::Mle::Mle::SetStateDetached...

OSV-2020-599 Index-out-of-bounds in prepare_macpads

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14768 Crash type: Index-out-of-bounds Crash state: preparemacpads gcrymdsetkey gcrymacsetkey...

OSV-2020-416 Use-of-uninitialized-value in UA_ServerConfig_clean

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14848 Crash type: Use-of-uninitialized-value Crash state: UAServerConfigclean UAServerdelete fuzzbinarymessage.cc...

OSV-2020-396 UNKNOWN READ in ot::TaskletScheduler::PopTasklet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13370 Crash type: UNKNOWN READ Crash state: ot::TaskletScheduler::PopTasklet ot::TaskletScheduler::ProcessQueuedTasklets radioreceivedone.cpp...

OSV-2020-63 UNKNOWN READ in arrow::BaseBinaryBuilder<arrow::BinaryType>::UnsafeAppend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20697 Crash type: UNKNOWN READ Crash state: arrow::BaseBinaryBuilder::UnsafeAppend parquet::PlainByteArrayDecoder::DecodeArrowDense parquet::PlainByteArrayDecoder::DecodeArrow...

Extreme Viewing suffers from a buffer overflow vulnerability (CNVD-2020-41322)

Speed View is a super-fast ultra-high-definition viewing software, compatible with almost all mainstream, professional image formats, can quickly open dozens of megabytes or even hundreds of megabytes of large pictures, but also supports a variety of shortcut operations. Extreme Viewer suffers fr...

Extreme Viewing suffers from a heap overflow vulnerability (CNVD-2020-32601)

Extreme Viewer is a super-fast, ultra-high-definition image viewing software that is compatible with all major image formats and professional image formats. A heap overflow vulnerability exists, which can be exploited by an attacker to cause the software to crash...

Symantec Endpoint Protection 14.2.5569 installation failure error, " symcorpuires.dll could not be found."

Facing issues while installing Symantec Endpoint Protection client 14.x while installing on App Layer.When trying to install 14.2.5569 version of SEP , it’s getting crashed. and post a reboot of the packaging machine, unable to search in icons or search box . Getting an error that says...

Extreme Viewing suffers from a heap overflow vulnerability (CNVD-2020-33236)

Extreme Viewer is the current ultra-fast and ultra-high-definition viewing software, compatible with all mainstream image formats and professional image formats. A heap overflow vulnerability exists, which can be exploited by an attacker to cause the software to crash...

Out-of-bounds reading vulnerability in WPS images

WPS Photo is an ad-free image processing software. WPS Pictures has an out-of-bounds read vulnerability that can be exploited by an attacker to construct a special picture causing the software to crash...

Ltd. Heap Overflow Vulnerability Exists in Aiki Watch PC Version

Aiki Viewer for PC is a viewer tool from Aiki. Ltd. Aqiyi Viewer for PC suffers from a heap overflow vulnerability that can be exploited by an attacker to cause a software crash, and further exploitation can lead to arbitrary code execution...

A heap overflow vulnerability exists in the PC version of Beijing Aqiyi Technology Co.'s Aqiyi Watch PC version (CNVD-2020-31414)

Aiki Viewer for PC is a viewer tool from Aiki. Ltd. Aqiyi Viewer for PC suffers from a heap overflow vulnerability that can be exploited by an attacker to cause a software crash, and further exploitation can lead to arbitrary code execution...

Arbitrary Code Execution

webkitgtk is vulnerable to arbitrary code execution. The vulnerability exists through two array index errors, leading to out-of-bounds memory reads, were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

Arbitrary Code Execution

xpdf is vulnerable to arbitrary code execution. The vulnerability exists as an attacker could create a malicious PDF file that would cause Xpdf to crash or, potentially, execute arbitrary code when opened...

CVE-2018-21091

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. Telecom has a System Crash via abnormal exception handling. The Samsung ID is SVE-2017-10906 January 2018...

CVE-2020-6807

When a device was changed while a stream was about to be destroyed, the stream-reinit task may have been executed after the stream was destroyed, causing a use-after-free and a potentially exploitable crash. This vulnerability affects Thunderbird 68.6, Firefox 74, Firefox ESR68.6, and Firefox ESR...

PYSEC-2020-190

A NULL pointer dereference is present in libyang before v1.0-r3 in the function lysextensioninstancesfree due to a copy of unresolved extensions in lysrestrdup. Applications that use libyang to parse untrusted input yang files may crash...