Browse CVEs

MEDIUM 6.5 CVE-2020-0279 In the AAC parser, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no add… Android Mitigation only Fix from $1,6002020-09-17 MEDIUM 5.5 CVE-2020-0125 In mediadrm, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional… Android Mitigation only Fix from $1,6002020-09-17 HIGH 7.8 CVE-2020-0430 In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of pr… Android Mitigation only Fix from $1,9502020-09-17 MEDIUM 5.5 CVE-2020-0427 In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no … Debian Linux Patch available Fix from $1,6002020-09-17 MEDIUM 5.5 CVE-2020-0393 In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local inform… Android Mitigation only Fix from $1,6002020-09-17 MEDIUM 6.1 CVE-2020-3988 VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint componen… Horizon Client 5.4.4 / 16.0.0+ Fix from $1,6002020-09-16 MEDIUM 6.5 CVE-2020-3990 VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflo… Horizon Client 5.4.4 / 16.0.0+ Fix from $1,6002020-09-16 MEDIUM 6.1 CVE-2020-3986 VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint componen… Horizon Client 5.4.4 / 16.0.0+ Fix from $1,6002020-09-16 MEDIUM 6.1 CVE-2020-3987 VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint componen… Horizon Client 5.4.4 / 16.0.0+ Fix from $1,6002020-09-16 MEDIUM 5.5 CVE-2020-14314 A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the way it accesses a directory with… Linux Kernel after 5.8.9 Fix from $1,6002020-09-15 HIGH 7.5 CVE-2020-16101 It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out-of-bounds buffer access. Aff… Command Centre 8.00.1228 / 8.10.1211+ Fix from $1,9502020-09-15 MEDIUM 5.5 CVE-2020-16855 <p>An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which co… Office Patch available Fix from $1,6002020-09-11 MEDIUM 6.1 CVE-2020-9726 Adobe FrameMaker version 2019.0.6 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an a… Framemaker after 2019.0.6 Fix from $1,6002020-09-10 HIGH 8.1 CVE-2020-1912 An out-of-bounds read/write vulnerability when executing lazily compiled inner generator functions in Facebook Hermes prior to commit 091835377369c8f… Hermes after 0.4.3 Fix from $1,9502020-09-09 HIGH 7.1 CVE-2020-3617 u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely validated before accessing the field and leads to Inform… Kamorta Firmware Mitigation only Fix from $1,9502020-09-09 MEDIUM 5.5 CVE-2020-3674 Information can leak into userspace due to improper transfer of data from kernel to userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… Nicobar Firmware Patch available Fix from $1,6002020-09-09 HIGH 7.5 CVE-2020-11115 u'Buffer over read occurs while processing information element from beacon due to lack of check of data received from beacon' in Snapdragon Auto, Sna… Apq8009 Firmware Patch available Fix from $1,9502020-09-08 CRITICAL 9.8 CVE-2020-25021 An issue was discovered in Noise-Java through 2020-08-27. ChaChaPolyCipherState.encryptWithAd() allows out-of-bounds access. Noise Java after 2020-08-27 Fix from $2,3002020-09-04 CRITICAL 9.8 CVE-2020-25022 An issue was discovered in Noise-Java through 2020-08-27. AESGCMFallbackCipherState.encryptWithAd() allows out-of-bounds access. Noise Java after 2020-08-27 Fix from $2,3002020-09-04 CRITICAL 9.8 CVE-2020-25023 An issue was discovered in Noise-Java through 2020-08-27. AESGCMOnCtrCipherState.encryptWithAd() allows out-of-bounds access. Noise Java after 2020-08-27 Fix from $2,3002020-09-04 HIGH 7.1 CVE-2020-12247 In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds read beca… Phantompdf after 10.0.0.35798 Fix from $1,9502020-09-04 MEDIUM 6.5 CVE-2020-24977 GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixe… Debian Linux Patch available Fix from $1,6002020-09-04 HIGH 7.1 CVE-2020-24558 A vulnerability in an Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services dll may allow an attacker… Apex One Mitigation only Fix from $1,9502020-09-01 CRITICAL 9.1 CVE-2020-25054 An issue was discovered on Samsung mobile devices with software through 2020-04-02 (Exynos modem chipsets). There is a heap-based buffer over-read in… Exynos Mitigation only Fix from $2,3002020-08-31 MEDIUM 5.0 CVE-2020-14364EPSS 5% An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB pa… Openstack 5.2.0+ Fix from $1,6002020-08-31 MEDIUM 6.5 CVE-2020-8244 A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply user input (even typed) that… Debian Linux 1.2.3 / 2.2.1+ Fix from $1,6002020-08-30 HIGH 8.8 CVE-2020-17390 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first … Parallels Desktop 15.1.4+ Fix from $1,9502020-08-25 CRITICAL 9.1 CVE-2019-11852 An out-of-bounds reads vulnerability exists in the ACEView Service of ALEOS before 4.13.0, 4.9.5, and 4.4.9. Sensitive information may be disclosed v… Aleos 4.4.9 / 4.9.5+ Fix from $2,3002020-08-21 MEDIUM 5.5 CVE-2020-9096 HUAWEI P30 Pro smartphones with Versions earlier than 10.1.0.160(C00E160R2P8) have an out of bound read vulnerability. Some functions are lack of ver… P30 Pro Firmware 10.1.0.160+ Fix from $1,6002020-08-21 HIGH 7.8 CVE-2020-8870 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is r… Foxit Studio Photo after 3.6.6.918 Fix from $1,9502020-08-20