Browse CVEs

CRITICAL 9.1 CVE-2019-9033 An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for the "Rank and Dimension… Matio No fix yet Fix from $2,3002019-02-23 CRITICAL 9.1 CVE-2019-9034 An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for a memcpy in the functio… Matio No fix yet Fix from $2,3002019-02-23 CRITICAL 9.1 CVE-2019-9035 An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function ReadNextStr… Matio No fix yet Fix from $2,3002019-02-23 CRITICAL 9.8 CVE-2019-9020EPSS 10% An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_de… PHP 5.6.40 / 7.1.26+ Fix from $2,3002019-02-22 CRITICAL 9.8 CVE-2019-9021EPSS 10% An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR r… PHP 5.6.40 / 7.1.26+ Fix from $2,3002019-02-22 HIGH 7.5 CVE-2019-9022 An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can all… PHP 7.1.26 / 7.2.14+ Fix from $1,9502019-02-22 CRITICAL 9.8 CVE-2019-9023EPSS 9% An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read… PHP 5.6.40 / 7.1.26+ Fix from $2,3002019-02-22 HIGH 7.5 CVE-2019-9024EPSS 7% An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XML… PHP 5.6.40 / 7.1.26+ Fix from $1,9502019-02-22 CRITICAL 9.8 CVE-2019-9025 An issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an argument to the mb_split() function in ext/mbstring/php… PHP 7.3.1+ Fix from $2,3002019-02-22 HIGH 7.5 CVE-2018-20783EPSS 6% In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an atta… PHP 5.6.39 / 7.0.33+ Fix from $1,9502019-02-21 HIGH 8.8 CVE-2019-5782EPSS 13% Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox … Chrome 72.0.3626.81+ Fix from $1,9502019-02-19 HIGH 8.8 CVE-2019-5770 Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory read via a… Chrome 72.0.3626.81+ Fix from $1,9502019-02-19 MEDIUM 5.5 CVE-2019-3812 QEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of up to 128 bytes in the hw/i2c/i2c-ddc.c:i2c_ddc() fun… Fedora after 3.1.0 Fix from $1,6002019-02-19 HIGH 8.8 CVE-2019-8904 do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf. Ubuntu Linux No fix yet Fix from $1,9502019-02-18 MEDIUM 6.5 CVE-2019-8397 An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_close_real in H5T.c. Hdf5 No fix yet Fix from $1,6002019-02-17 MEDIUM 6.5 CVE-2019-8398 An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c. Hdf5 No fix yet Fix from $1,6002019-02-17 HIGH 8.8 CVE-2019-8378 An issue was discovered in Bento4 1.5.1-628. A heap-based buffer over-read exists in AP4_BitStream::ReadBytes() in Codecs/Ap4BitStream.cpp, a similar… Bento4 No fix yet Fix from $1,9502019-02-17 MEDIUM 5.0 CVE-2018-19020 When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attacker can force the application t… Cx Supervisor after 3.42 Fix from $1,6002019-02-12 MEDIUM 6.5 CVE-2018-9588 In avdt_scb_hdl_report of avdt_scb_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible o… Android Mitigation only Fix from $1,6002019-02-11 MEDIUM 5.5 CVE-2018-9589 In ieee802_11_rx_wnmsleep_req of wnm_ap.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible o… Android Patch available Fix from $1,6002019-02-11 HIGH 7.5 CVE-2018-9590 In add_attr of sdp_discovery.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bound… Android Patch available Fix from $1,9502019-02-11 HIGH 7.5 CVE-2018-9591 In bta_hh_ctrl_dat_act of bta_hh_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out… Android Mitigation only Fix from $1,9502019-02-11 HIGH 7.5 CVE-2018-9592 In mca_ccb_hdl_rsp of mca_cact.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bo… Android Mitigation only Fix from $1,9502019-02-11 MEDIUM 6.5 CVE-2018-9593 In llcp_dlc_proc_i_pdu of llcp_dlc.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out o… Android Mitigation only Fix from $1,6002019-02-11 MEDIUM 6.5 CVE-2018-9594 In llcp_link_proc_agf_pdu of llcp_link.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible o… Android Mitigation only Fix from $1,6002019-02-11 MEDIUM 6.5 CVE-2019-7699 A heap-based buffer over-read occurs in AP4_BitStream::WriteBytes in Codecs/Ap4BitStream.cpp in Bento4 v1.5.1-627. Remote attackers could leverage th… Bento4 No fix yet Fix from $1,6002019-02-10 MEDIUM 6.5 CVE-2019-7700 A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp in Binaryen 1.38.22. A crafted wasm input can c… Binaryen 64+ Fix from $1,6002019-02-10 MEDIUM 6.5 CVE-2019-7701 A heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace() in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm in… Binaryen 64+ Fix from $1,6002019-02-10 MEDIUM 5.5 CVE-2019-7665 In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf. A crafted ELF input can… Debian Linux No fix yet Fix from $1,6002019-02-09 HIGH 8.1 CVE-2019-7635 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c. Debian Linux after 2.0.9 Fix from $1,9502019-02-08