CVE-2016-7395

Removed by vendor...

PT-2016-7310

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 53.0.2785.89 on Windows and OS X Google Chrome versions prior to 53.0.2785.92 on Linux Description The issue is related to the SkPath.cpp in Skia, which does not properly validate the return values of ChopMonoAt...

CVE-2016-7395: Undefined Security Weakness

SkPath.cpp in Skia, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, does not properly validate the return values of ChopMonoAtY calls, which allows remote attackers to cause a denial of service uninitialized memory access and application crash or...

libtiff: use of uninitialized memory in putcontig8bitYCbCr21tile and NeXTDecode

The 1 putcontig8bitYCbCr21tile function in tifgetimage.c or 2 NeXTDecode function in tifnext.c in LibTIFF allows remote attackers to cause a denial of service uninitialized memory access via a crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and libtiff-cvs-2.tif...

libtiff: use of uninitialized memory in NeXTDecode

The NeXTDecode function in tifnext.c in LibTIFF allows remote attackers to cause a denial of service uninitialized memory access via a crafted TIFF image, as demonstrated by libtiff5.tif...

libtiff: use of uninitialized memory in NeXTDecode

The NeXTDecode function in tifnext.c in LibTIFF allows remote attackers to cause a denial of service uninitialized memory access via a crafted TIFF image, as demonstrated by libtiff5.tif...

libtiff: use of uninitialized memory in putcontig8bitYCbCr21tile and NeXTDecode

The 1 putcontig8bitYCbCr21tile function in tifgetimage.c or 2 NeXTDecode function in tifnext.c in LibTIFF allows remote attackers to cause a denial of service uninitialized memory access via a crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and libtiff-cvs-2.tif...

UBUNTU-CVE-2016-4587

WebKit in Apple iOS before 9.3.3 and tvOS before 9.2.2 allows remote attackers to obtain sensitive information from uninitialized process memory via a crafted web site...

UBUNTU-CVE-2015-8808

The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service uninitialized memory access via a crafted GIF file...

Code injection

The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service uninitialized memory access via a crafted GIF file...

CVE-2015-8808

The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service uninitialized memory access via a crafted GIF file...

CVE-2015-8808

The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service uninitialized memory access via a crafted GIF file...

CVE-2015-8808

CVE-2015-8808 affects GraphicsMagick (GIF decoding path). The DecodeImage function in coders/gif.c can trigger an out-of-bounds read on crafted GIFs, leading to denial of service via uninitialized memory access. The issue is tied to the GIF parser in GraphicsMagick 1.3.18 and has been addressed i...

CVE-2015-8808

The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service uninitialized memory access via a crafted GIF file...

Internet Bug Bounty: Adobe Flash Player TimedEvent.parent Memory Corruption Vulnerability

I. Summary Adobe Flash Player is prone to a vulnerability which leads to memory corruption because of uninitialize memory of TimedEvent.parent. ------------------------------------------------------------------ II. Description Normally, TimedEvent class should initialize the memory of its parent...

CVE-2015-8808: Improper Restriction of Operations within the Bounds of a Memory Buffer

The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service uninitialized memory access via a crafted GIF file...

The vulnerability of Google Chrome browser allows a malicious actor to compromise the accessibility of protected information.

The vulnerability exists in the module/webaudio/BiquadDSPKernel.cpp of the Web Audio API implementation in Blink for Google Chrome. It stems from improper handling of parallel streams when attempting to update the coefficients of the biquad filter. Exploiting this vulnerability allows malicious...

The vulnerability of Google Chrome browser allows a malicious actor to compromise the accessibility of protected information.

The vulnerability exists in the WebGL implementation of Google Chrome due to improper interaction between calls to clear and the state of the draw buffer. Exploiting this vulnerability allows malicious actors to trigger a service failure reading uninitialized memory by using a specially crafted...

The vulnerability of the PHP interpreter allows a remote attacker to trigger a service failure or cause other effects on the system.

The vulnerability of the PHP interpreter in the file module fileinfo for the Fileinfo component lies in the incomplete reading of available data during a pread call. Exploiting this vulnerability allows an attacker to cause service failures by accessing uninitialized memory, or to otherwise affec...

Ubuntu 14.04 LTS / 16.04 LTS : Oxide vulnerabilities (USN-3015-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3015-1 advisory. Multiple security issues were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially...