Browse CVEs

MEDIUM 5.5 CVE-2018-12322 There is a heap out of bounds read in radare2 2.6.0 in _6502_op() in libr/anal/p/anal_6502.c via a crafted iNES ROM binary file. Radare2 Patch available Fix from $1,6002018-06-13 HIGH 8.8 CVE-2018-12264 Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.… Debian Linux No fix yet Fix from $1,9502018-06-13 HIGH 8.8 CVE-2018-12265 Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp. Debian Linux No fix yet Fix from $1,9502018-06-13 MEDIUM 5.5 CVE-2018-3579 In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, event->num_entries_in_… Android Patch available Fix from $1,6002018-06-12 HIGH 7.5 CVE-2018-12248 An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OP_ENTER because mrbgems/mruby-fiber/src/fiber.c does … Mruby Patch available Fix from $1,9502018-06-12 HIGH 7.5 CVE-2018-5153 If websocket data is sent with mixed text and binary in a single message, the binary data can be corrupted. This can result in an out-of-bounds read … Firefox 60.0+ Fix from $1,9502018-06-11 HIGH 8.2 CVE-2017-7813 Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed. This usually resu… Firefox after 55.0.3 Fix from $1,9502018-06-11 CRITICAL 9.1 CVE-2017-7758 An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while the encoder is in use. This vu… Enterprise Linux Desktop 52.2.0 / 54.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-7778 A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninit… Firefox 1.3.10 / 52.2.0+ Fix from $2,3002018-06-11 CRITICAL 9.1 CVE-2017-5465EPSS 13% An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory bein… Debian Linux 45.9.0 / 53.0+ Fix from $2,3002018-06-11 CRITICAL 9.1 CVE-2017-7753 An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects … Debian Linux 52.3.0 / 55.0+ Fix from $2,3002018-06-11 HIGH 7.5 CVE-2017-7754 An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations. This vulnerability affects Firefox < 54, Firefo… Debian Linux 52.2.0 / 54.0+ Fix from $1,9502018-06-11 CRITICAL 9.8 CVE-2017-5446 An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially exploitable… Debian Linux 45.9.0 / 53.0+ Fix from $2,3002018-06-11 MEDIUM 5.3 CVE-2017-5418 An out of bounds read error occurs when parsing some HTTP digest authorization responses, resulting in information leakage through the reading of ran… Firefox 52.0+ Fix from $1,6002018-06-11 CRITICAL 9.8 CVE-2018-12092 tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code. Tinyexr Mitigation only Fix from $2,3002018-06-11 MEDIUM 6.5 CVE-2018-10360 The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and applic… Ubuntu Linux Patch available Fix from $1,6002018-06-11 MEDIUM 5.5 CVE-2018-4253 An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "AMD" component. It allows local users to… Mac Os X 10.13.5+ Fix from $1,6002018-06-08 HIGH 8.8 CVE-2018-4222EPSS 12% An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is aff… Safari 4.3.1 / 7.5+ Fix from $1,9502018-06-08 CRITICAL 9.8 CVE-2018-12064 tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h. Tinyexr Mitigation only Fix from $2,3002018-06-08 CRITICAL 9.1 CVE-2018-3739 https-proxy-agent before 2.1.1 passes auth option to the Buffer constructor without proper sanitization, resulting in DoS and uninitialized memory le… Https Proxy Agent 2.2.0+ Fix from $2,3002018-06-07 HIGH 8.1 CVE-2018-11737 An issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found… The Sleuth Kit after 4.6.1 Fix from $1,9502018-06-05 HIGH 8.1 CVE-2018-11738 An issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found… The Sleuth Kit after 4.6.1 Fix from $1,9502018-06-05 HIGH 8.1 CVE-2018-11739 An issue was discovered in libtskimg.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was foun… The Sleuth Kit after 4.6.1 Fix from $1,9502018-06-05 HIGH 8.1 CVE-2018-11740 An issue was discovered in libtskbase.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was fou… The Sleuth Kit after 4.6.1 Fix from $1,9502018-06-05 HIGH 8.1 CVE-2018-11693 An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::skip_over_scopes… Libsass after 3.5.4 Fix from $1,9502018-06-04 HIGH 8.1 CVE-2018-11697 An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::exactly() which … Libsass after 3.5.4 Fix from $1,9502018-06-04 HIGH 8.1 CVE-2018-11698 An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::handle_error which could b… Libsass after 3.5.4 Fix from $1,9502018-06-04 HIGH 7.5 CVE-2017-2852 An exploitable denial-of-service vulnerability exists in the unserialization of lists functionality of Natus Xltek NeuroWorks 8. A specially crafted … Xltek Neuroworks Mitigation only Fix from $1,9502018-06-01 HIGH 7.5 CVE-2017-2858 An exploitable denial-of-service vulnerability exists in the traversal of lists functionality of Natus Xltek NeuroWorks 8. A specially crafted networ… Xltek Neuroworks Mitigation only Fix from $1,9502018-06-01 HIGH 7.5 CVE-2017-2860 An exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek NeuroWorks 8. A specially crafted … Xltek Neuroworks Mitigation only Fix from $1,9502018-06-01