303 matches found
CVE-2021-1897
Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
CVE-2021-1897
CVE-2021-1897 is a Qualcomm bootloader vulnerability in Snapdragon devices involving a buffer over-read during splash image loading due to missing boundary checks. Affected component: Bootloader. Evidence from the Android Pixel bulletin lists CVE-2021-1897 as Moderate severity with a physical att...
Qualcomm 芯片缓冲区错误漏洞
The Qualcomm MDM9206 and APQ8053 are both central processing unit CPU products from Qualcomm Incorporated. A buffer error vulnerability exists in the Qualcomm APQ8009, which stems from a lack of boundary check validation when loading a splash image in the device's Boot subsystem. An attacker with...
[SECURITY] Fedora 34 Update: plymouth-kcm-5.21.3-1.fc34
This is a System Settings configuration module for configuring the plymouth splash screen...
Fedora: Security Advisory for plymouth-kcm (FEDORA-2021-85c9774673)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
The vulnerability of the Splash::blitTransparent function in the Poppler PDF rendering library allows a attacker to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the Splash::blitTransparent function splash/Splash.cc in the Poppler PDF rendering library is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and cause servi...
Splash suffers from a denial of service vulnerability (CNVD-2021-17449)
Splash is a JavaScript rendering service, a lightweight browser with an HTTP API, and it interfaces with the Twisted and QT libraries in Python. A denial of service vulnerability exists in Splash. An attacker can exploit this vulnerability to cause the program to crash...
OSV-2020-2303 Use-of-uninitialized-value in Splash::pipeRunSimpleXBGR8
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29651 Crash type: Use-of-uninitialized-value Crash state: Splash::pipeRunSimpleXBGR8 Splash::drawSpan Splash::fillWithPattern...
EulerOS 2.0 SP9 : poppler (EulerOS-SA-2020-2436)
According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at...
OSV-2020-794 Use-of-uninitialized-value in Splash::pipeRunSimpleXBGR8
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23086 Crash type: Use-of-uninitialized-value Crash state: Splash::pipeRunSimpleXBGR8 Splash::blitImage Splash::drawImage...
CVE-2020-11882
The O2 Business application 1.2.0 for Android exposes the canvasm.myo2.SplashActivity activity to other applications. The purpose of this activity is to handle deeplinks that can be delivered either via links or by directly calling the activity. However, the deeplink format is not properly...
Arbitrary Code Execution
java is vulnerable to arbitrary code execution. A buffer overflow flaw was found in the splash screen processing. A remote attacker could extend privileges to read and write local files, as well as to execute local applications with the privileges of the user running the java process...
Updated poppler packages fix security vulnerabilities
Updated poppler packages fix security vulnerabilities Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsamplerowboxfilter function. CVE-2019-9631 PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function...
Arbitrary Code Execution
libpoppler.so is vulnerable to arbitrary code execution. A heap-based buffer overflow in Splash::blitTransparent in splash/Splash.cc allows an attacker to execute arbitrary code...
Poppler null pointer dereference vulnerability (CNVD-2019-14281)
Poppler is a C++ class library for generating PDF, the library is inherited from Xpdf PDF reader. Poppler 0.74.0 version of the splash/SplashClip.cc file of the 'SplashClip::clipAALine' function of the null pointer back-reference vulnerability, the vulnerability stems from the network system or...
CVE-2019-10872
An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc...
CVE-2019-10872
An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc...
DEBIAN-CVE-2019-10872
An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc...