CVE-2019-13751

CVE-2019-13751 is a SQLite-related information disclosure in Google Chrome/Chromium. The issue arises from an uninitialized value in the SQLite library, exploited via a crafted HTML page to read potentially sensitive data from the process memory. Publicly documented fixes are included in Chromium...

CVE-2019-13751

Uninitialized data in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

CVE-2019-13747

CVE-2019-13747 affects Google Chrome/Chromium rendering on Android versions prior to 79.0.3945.79, where uninitialized data in rendering could enable a remote attacker to trigger heap corruption via a crafted HTML page. The provided connected documents confirm this CVE is tied to Chromium/Chrome ...

EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2019-2354)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF,and Phot...

CVE-2019-19240

Embedthis GoAhead before 5.0.1 mishandles redirected HTTP requests with a large Host header. The GoAhead WebsRedirect uses a static host buffer that has a limited length and can overflow. This can cause a copy of the Host header to fail, leaving that buffer uninitialized, which may leak...

Design/Logic Flaw

Embedthis GoAhead before 5.0.1 mishandles redirected HTTP requests with a large Host header. The GoAhead WebsRedirect uses a static host buffer that has a limited length and can overflow. This can cause a copy of the Host header to fail, leaving that buffer uninitialized, which may leak...

PT-2019-15789

Name of the Vulnerable Software and Affected Versions GoAhead versions prior to 5.0.1 Description The issue arises from the mishandling of redirected HTTP requests that contain a large Host header. Specifically, the GoAhead WebsRedirect utilizes a static host buffer with a limited length, which c...

Information Disclosure

apache arrow is vulnerable to information disclosure. The data read from Apache Parquet files with RLE null encoded data is uninitialized, potentially allowing data in memory to be unintentionally shared over the wire...

CVE-2014-3180

In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read. restartsyscall uses uninitialized data when restarting compatsysnanosleep. NOTE: this is disputed because the code path is unreachable...

QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables

tcpemu in slirp/tcpsubr.c aka slirp/src/tcpsubr.c in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure...

gd: Information disclosure in gdImageCreateFromXbm()

When using the gdImageCreateFromXbm function in the GD Graphics Library aka LibGD 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized...

DEBIAN-CVE-2019-18603

OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error conditions because uninitialized RPC output variables are sent over the network to a peer...

CVE-2019-18197

In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be...

Google Android Information Disclosure Vulnerability (CNVD-2019-36441)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in libxaac in Google Android 10. The vulnerability stems from the presence of uninitialized data. An attacker could...

Google Android Information Disclosure Vulnerability (CNVD-2019-36436)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in libxaac in Google Android 10. The vulnerability stems from the presence of uninitialized data. An attacker could...

Google Android Information Disclosure Vulnerability (CNVD-2019-36437)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in libxaac in Google Android 10. The vulnerability stems from the presence of uninitialized data. An attacker could...

Google Android Information Disclosure Vulnerability (CNVD-2019-36438)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in libxaac in Google Android 10. The vulnerability stems from the presence of uninitialized data. An attacker could...

Google Android Information Disclosure Vulnerability (CNVD-2019-36440)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in libxaac in Google Android 10. The vulnerability stems from the presence of uninitialized data. An attacker could...

Google Android Information Disclosure Vulnerability (CNVD-2019-36411)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in libxaac in Google Android 10. The vulnerability stems from the presence of uninitialized data. An attacker could...

Google Android Information Disclosure Vulnerability (CNVD-2019-36435)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in libxaac in Google Android 10. The vulnerability stems from the presence of uninitialized data. An attacker could...