Browse CVEs

HIGH 8.1 CVE-2018-20311 Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCPDFAction race condition that can cause a stack-based buffer ov… Phantompdf 8.3.10 / 9.5+ Fix from $1,9502021-01-07 HIGH 8.1 CVE-2018-20312 Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer over… Phantompdf 8.3.10 / 9.5+ Fix from $1,9502021-01-07 MEDIUM 5.5 CVE-2020-27842 There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg coul… Fedora Patch available Fix from $1,6002021-01-05 MEDIUM 5.5 CVE-2020-27843 A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encodin… Fedora 2.4.0+ Fix from $1,6002021-01-05 MEDIUM 5.5 CVE-2020-27845 There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conver… Fedora 2.4.0+ Fix from $1,6002021-01-05 MEDIUM 5.9 CVE-2019-25013 The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, … Fedora after 2.32 Fix from $1,6002021-01-04 HIGH 7.5 CVE-2020-35890 An issue was discovered in the ordnung crate through 2020-09-03 for Rust. compact::Vec violates memory safety via out-of-bounds access for large capa… Ordnung after 2020-09-03 Fix from $1,9502020-12-31 CRITICAL 9.1 CVE-2020-35892 An issue was discovered in the simple-slab crate before 0.3.3 for Rust. index() allows an out-of-bounds read. Simple Slab 0.3.3+ Fix from $2,3002020-12-31 CRITICAL 9.1 CVE-2020-35859 An issue was discovered in the lucet-runtime-internals crate before 0.5.1 for Rust. It mishandles sigstack allocation. Guest programs may be able to … Lucet Runtime Internals 0.5.1+ Fix from $2,3002020-12-31 HIGH 7.5 CVE-2020-35861 An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potential… Bumpalo 3.2.1+ Fix from $1,9502020-12-31 MEDIUM 6.5 CVE-2019-20808 In QEMU 4.1.0, an out-of-bounds read flaw was found in the ATI VGA implementation. It occurs in the ati_cursor_define() routine while handling MMIO w… Qemu Mitigation only Fix from $1,6002020-12-31 HIGH 7.5 CVE-2020-9094 There is an out of bound read vulnerability in some verisons of Huawei CloudEngine product. A module does not deal with specific message properly. At… Cloudengine 12800 Firmware Mitigation only Fix from $1,9502020-12-29 MEDIUM 6.7 CVE-2020-9125 There is an out-of-bound read vulnerability in huawei smartphone Mate 30 versions earlier than 10.1.0.156 (C00E155R7P2). An attacker with specific pe… Mate 30 Firmware 10.1.0.156+ Fix from $1,6002020-12-29 MEDIUM 6.5 CVE-2020-9201 There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the … Nip6800 Firmware Mitigation only Fix from $1,6002020-12-24 HIGH 7.1 CVE-2020-27338 An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the DHCPv6 client component allows an unauthenticated remote atta… Ipv6 6.0.1.68+ Fix from $1,9502020-12-22 MEDIUM 5.3 CVE-2020-27336 An issue was discovered in Treck IPv6 before 6.0.1.68. Improper input validation in the IPv6 component when handling a packet sent by an unauthentica… Ipv6 6.0.1.68+ Fix from $1,6002020-12-22 HIGH 7.5 CVE-2020-5360 Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability. An unauthenticated remote attacker could … HTTP Server 4.5+ Fix from $1,9502020-12-16 MEDIUM 5.3 CVE-2020-29362 An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit s… P11 Kit 0.23.22+ Fix from $1,6002020-12-16 MEDIUM 5.5 CVE-2020-27047 In ce_t4t_update_binary of ce_t4t.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… Android Patch available Fix from $1,6002020-12-15 MEDIUM 6.7 CVE-2020-27036 In phNxpNciHal_send_ext_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local es… Android Patch available Fix from $1,6002020-12-15 HIGH 7.5 CVE-2020-27024 In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote info… Android Mitigation only Fix from $1,9502020-12-15 MEDIUM 5.5 CVE-2020-27027 In nfc_ncif_proc_get_routing of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati… Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 6.5 CVE-2020-0490 In floor1_info_unpack of floor1.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclo… Android Patch available Fix from $1,6002020-12-15 MEDIUM 6.5 CVE-2020-0492 In BitstreamFillCache of bitstream.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information d… Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-0493 In CPDF_SampledFunc::v_Call of cpdf_sampledfunc.cpp, there is a possible out of bounds read due to improper input validation. This could lead to loca… Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 6.5 CVE-2020-0494 In ih264d_parse_ave of ih264d_sei.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disc… Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-0498 In decode_packed_entry_number of codebook.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote informat… Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-0244 In writeBurstBufferBytes of SPDIFEncoder.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local infor… Android Patch available Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-0280 In nci_proc_ee_management_rsp of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informat… Android Patch available Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-8936 An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to UntrustedCall. UntrustedCall fail… Asylo after 0.6.0 Fix from $1,6002020-12-15