Browse CVEs

HIGH 8.6 CVE-2019-5146 An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13025.10004. A specially crafted pixel shader can ca… Atidxx64 Mitigation only Fix from $1,9502020-01-25 HIGH 8.6 CVE-2019-5147 An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13003.1007. A specially crafted pixel shader can cau… Atidxx64 Mitigation only Fix from $1,9502020-01-25 HIGH 7.5 CVE-2019-20387 repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of … Debian Linux 0.7.6+ Fix from $1,9502020-01-21 MEDIUM 6.5 CVE-2019-14907 All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or abov… Fedora 4.9.18 / 4.10.12+ Fix from $1,6002020-01-21 CRITICAL 9.8 CVE-2019-10532 Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon Auto, Snapdragon Connectivit… Apq8009 Firmware Mitigation only Fix from $2,3002020-01-21 CRITICAL 9.1 CVE-2019-10579 Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr… Apq8009 Firmware Mitigation only Fix from $2,3002020-01-21 HIGH 7.5 CVE-2020-7044 In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using >= and <= to resolve … Wireshark 3.2.1+ Fix from $1,9502020-01-16 MEDIUM 5.5 CVE-2020-0615 An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory… Windows 10 Patch available Fix from $1,6002020-01-14 HIGH 7.8 CVE-2015-2325 The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bound… MariaDB 5.4.41 / 5.5.26+ Fix from $1,9502020-01-14 MEDIUM 5.5 CVE-2015-2326 The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (out-of-bou… MariaDB 5.4.41 / 5.5.26+ Fix from $1,6002020-01-14 MEDIUM 5.5 CVE-2019-19817 The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x2e8a Out-of-Bounds… Nitro Free Pdf Reader No fix yet Fix from $1,6002020-01-10 CRITICAL 9.1 CVE-2020-6162 An issue was discovered in Bftpd 5.3. Under certain circumstances, an out-of-bounds read is triggered due to an uninitialized value. The daemon crash… Bftpd Mitigation only Fix from $2,3002020-01-10 HIGH 8.8 CVE-2020-6628 Ming (aka libming) 0.4.8 has a heap-based buffer over-read in the function decompile_SWITCH() in decompile.c. Libming No fix yet Fix from $1,9502020-01-09 HIGH 7.1 CVE-2020-6624 jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c. Jhead after 3.04 Fix from $1,9502020-01-09 HIGH 7.1 CVE-2020-6625 jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c. Jhead after 3.04 Fix from $1,9502020-01-09 HIGH 8.8 CVE-2020-6618 stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table. Stb Truetype.h after 1.22 Fix from $1,9502020-01-08 HIGH 8.8 CVE-2020-6620 stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8. Stb Truetype.h after 1.22 Fix from $1,9502020-01-08 HIGH 8.8 CVE-2020-6621 stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT. Stb Truetype.h after 1.22 Fix from $1,9502020-01-08 HIGH 8.8 CVE-2020-6622 stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8. Stb Truetype.h after 1.22 Fix from $1,9502020-01-08 HIGH 8.8 CVE-2020-6609 GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c. Libredwg Patch available Fix from $1,9502020-01-08 HIGH 8.1 CVE-2020-6612 GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c. Libredwg No fix yet Fix from $1,9502020-01-08 HIGH 8.1 CVE-2020-6613 GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c. Libredwg No fix yet Fix from $1,9502020-01-08 HIGH 8.1 CVE-2020-6614 GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c. Libredwg No fix yet Fix from $1,9502020-01-08 CRITICAL 9.1 CVE-2019-20367 nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab). Debian Linux 0.10.0+ Fix from $2,3002020-01-08 CRITICAL 9.8 CVE-2019-14906 A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue only affects Red Hat SDL pack… Enterprise Linux after 2.0.9 Fix from $2,3002020-01-07 HIGH 7.1 CVE-2019-20352 In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm file) in set_text_free when called from expand_one_smac… Netwide Assembler No fix yet Fix from $1,9502020-01-06 HIGH 7.1 CVE-2020-5313 libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow. Pillow 6.2.2+ Fix from $1,9502020-01-03 HIGH 8.8 CVE-2019-20219 ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor in ngiflib.c. Ngiflib No fix yet Fix from $1,9502020-01-02 MEDIUM 6.5 CVE-2019-20199 An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling… Ezxml after 0.8.6 Fix from $1,6002019-12-31 MEDIUM 6.5 CVE-2019-20200 An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing crafted a XML file, performs incorrect memory handling… Ezxml after 0.8.6 Fix from $1,6002019-12-31