Memory Buffer Bounds Error — CVEs by weakness type

Libtiff MEDIUM 6.5

CVE-2016-5317

Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, …

Mitigation only

Fix from $1,600 2017-01-20

Libtiff MEDIUM 6.5

CVE-2016-5318

Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafte…

Fix: after 4.0.6

Fix from $1,600 2017-01-20

Libtiff MEDIUM 6.5

CVE-2016-5319

Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file.

Fix: after 4.0.6

Fix from $1,600 2017-01-20

Opensuse MEDIUM 6.5

CVE-2016-5321

The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service (invalid read and crash) via a crafted tiff im…

Fix: after 4.0.6

Fix from $1,600 2017-01-20

Chrome HIGH 8.8

CVE-2016-5199

An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, a…

Fix: after 54.0.2840.87

Fix from $1,950 2017-01-19

Chrome HIGH 8.8

CVE-2016-5200

V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android incorrectl…

Fix: after 54.0.2840.87

Fix from $1,950 2017-01-19

Provisioning Services CRITICAL 9.8

CVE-2016-9679

Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer.

Mitigation only

Fix from $2,300 2017-01-18

Provisioning Services CRITICAL 9.8

CVE-2016-9676

Buffer overflow in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors.

Mitigation only

Fix from $2,300 2017-01-18

Hexchat HIGH 7.5

CVE-2016-2233EPSS 35%

Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of servi…

No fix yet

Fix from $1,950 2017-01-18

Mujs HIGH 7.5

CVE-2016-7564

Heap-based buffer overflow in the Fp_toString function in jsfunction.c in Artifex Software MuJS allows attackers to cause a denial of service (crash)…

No fix yet

Fix from $1,950 2017-01-18

Graphicsmagick CRITICAL 9.8

CVE-2016-7996

Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a col…

Fix: after 1.3.25

Fix from $2,300 2017-01-18

Fedora CRITICAL 9.8

CVE-2016-2090

Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigge…

Fix: 0.8.2+

Fix from $2,300 2017-01-13

Foxit Pdf Toolkit HIGH 7.8

CVE-2017-5364

Memory Corruption Vulnerability in Foxit PDF Toolkit v1.3 allows an attacker to cause Denial of Service and Remote Code Execution when the victim ope…

Patch available

Fix from $1,950 2017-01-13

Linux Kernel CRITICAL 9.8

CVE-2016-8459

Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead to buffer overflow. Product: …

Mitigation only

Fix from $2,300 2017-01-12

Linux Kernel CRITICAL 9.8

CVE-2016-8439

Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions:…

Mitigation only

Fix from $2,300 2017-01-12

Linux Kernel CRITICAL 9.8

CVE-2016-8440

Possible buffer overflow in SMMU system call. Improper input validation in ADSP SID2CB system call may result in hypervisor memory overwrite. Product…

Mitigation only

Fix from $2,300 2017-01-12

Linux Kernel HIGH 7.8

CVE-2016-8441

Possible buffer overflow in the hypervisor. Inappropriate usage of a static array could lead to a buffer overrun. Product: Android. Versions: Kernel …

No fix yet

Fix from $1,950 2017-01-12

Libtiff HIGH 8.8

CVE-2017-5225

LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample valu…

Patch available

Fix from $1,950 2017-01-12

PHP CRITICAL 9.8

CVE-2016-7480EPSS 42%

The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12 does not verify that a key is an object, which allows …

Fix: 7.0.11+

Fix from $2,300 2017-01-11

Acrobat HIGH 7.8

CVE-2017-2963

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerabi…

Fix: after 15.020.20042