Memory Buffer Bounds Error — CVEs by weakness type

PostgreSQL CRITICAL 9.8

CVE-2015-3166

The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does no…

Fix: 9.0.20 / 9.1.16+

Fix from $2,300 2019-11-20

Debian Linux CRITICAL 9.8

CVE-2013-7087

ClamAV before 0.97.7 has WWPack corrupt heap memory

Fix: 0.97.7+

Fix from $2,300 2019-11-15

Xeon E 2276m Firmware MEDIUM 6.7

CVE-2019-0151

Insufficient memory protection in Intel(R) TXT for certain Intel(R) Core Processors and Intel(R) Xeon(R) Processors may allow a privileged user to po…

Mitigation only

Fix from $1,600 2019-11-14

Xeon Platinum 8253 Firmware MEDIUM 6.7

CVE-2019-0152

Insufficient memory protection in System Management Mode (SMM) and Intel(R) TXT for certain Intel(R) Xeon(R) Processors may allow a privileged user t…

Mitigation only

Fix from $1,600 2019-11-14

Mdm9150 Firmware MEDIUM 5.5

CVE-2019-2275

While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key operations are invoke…

Mitigation only

Fix from $1,600 2019-11-06

Mdm9150 Firmware CRITICAL 9.8

CVE-2019-2324

When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapd…

Patch available

Fix from $2,300 2019-11-06

Mdm9206 Firmware CRITICAL 9.8

CVE-2019-10541

Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Auto, Snapdragon Compute, Snapd…

Mitigation only

Fix from $2,300 2019-11-06

Msm8909w Firmware HIGH 7.8

CVE-2019-10502

Possible stack overflow when an index equal to io buffer size is accessed in camera module in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…

Patch available

Fix from $1,950 2019-11-06

Enterprise Linux HIGH 7.8

CVE-2017-5332

The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cau…

Patch available

Fix from $1,950 2019-11-04

Debian Linux CRITICAL 9.8

CVE-2013-2739

MiniDLNA has heap-based buffer overflow

Fix: 1.1.0+

Fix from $2,300 2019-11-01

Ubuntu Linux CRITICAL 9.8

CVE-2019-13508

FreeTDS through 1.1.11 has a Buffer Overflow.

Fix: after 1.1.11

Fix from $2,300 2019-10-31

Debian Linux MEDIUM 5.3

CVE-2010-0749

Transmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame.

Fix: 1.92+

Fix from $1,600 2019-10-30

Edk2 HIGH 7.8

CVE-2017-5731

Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local a…

Fix: 2017-11-07+

Fix from $1,950 2019-10-28

Nfsaxe CRITICAL 9.8

CVE-2017-14742

Buffer overflow in LabF nfsAxe FTP client 3.7 allows an attacker to execute code remotely.

No fix yet

Fix from $2,300 2019-10-25

Libpl Droidsonroids Gif CRITICAL 9.8

CVE-2019-11933

A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attac…

Fix: 1.2.19 / 2.19.291+

Fix from $2,300 2019-10-23

Acrobat Dc CRITICAL 9.8

CVE-2019-8205

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, a…

Fix: 15.006.30504 / 17.011.30150+

Fix from $2,300 2019-10-17

Acrobat Dc CRITICAL 9.8

CVE-2019-8195EPSS 23%

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, a…

Fix: 15.006.30504 / 17.011.30150+

Fix from $2,300 2019-10-17

Acrobat Dc CRITICAL 9.8

CVE-2019-8196EPSS 23%

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, a…

Fix: 15.006.30504 / 17.011.30150+

Fix from $2,300 2019-10-17

Acrobat Dc HIGH 8.8

CVE-2019-8174

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, a…

Fix: 15.006.30504 / 17.011.30150+

Fix from $1,950 2019-10-17

Spa112 Firmware HIGH 8.0

CVE-2019-15249