Browse CVEs

HIGH 8.8 CVE-2017-15388 Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read … Chrome 62.0.3202.62+ Fix from $1,9502018-02-07 HIGH 7.8 CVE-2018-6767EPSS 5% A stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-o… Debian Linux Patch available Fix from $1,9502018-02-06 MEDIUM 6.5 CVE-2018-6621 The decode_frame function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service (out of array read) v… Debian Linux after 3.2 Fix from $1,6002018-02-05 MEDIUM 5.5 CVE-2018-6612 An integer underflow bug in the process_EXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicio… Jhead Mitigation only Fix from $1,6002018-02-04 HIGH 8.8 CVE-2018-6611 soundlib/Load_stp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file. Libopenmpt 0.3.6+ Fix from $1,9502018-02-04 MEDIUM 5.9 CVE-2017-16912 The "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a de… Linux Kernel 4.1.49+ Fix from $1,6002018-01-31 HIGH 8.8 CVE-2018-6406 The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does not validate the child_frame_length data obtained f… Libwebm after 2018-01-30 Fix from $1,9502018-01-30 MEDIUM 6.5 CVE-2018-6392 The filter_slice function in libavfilter/vf_transpose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service (out-of-array ac… Debian Linux after 3.4.1 Fix from $1,6002018-01-29 CRITICAL 9.8 CVE-2017-12377EPSS 10% ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of… Debian Linux after 0.99.2 Fix from $2,3002018-01-26 MEDIUM 5.5 CVE-2017-12378 ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of… Debian Linux after 0.99.2 Fix from $1,6002018-01-26 HIGH 8.8 CVE-2018-6315 The outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds re… Debian Linux after 0.4.8 Fix from $1,9502018-01-25 CRITICAL 9.1 CVE-2018-1000005 libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (https://github.com/curl/curl/pu… Debian Linux after 7.57.0 Fix from $2,3002018-01-24 MEDIUM 6.0 CVE-2018-5683 The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by… Debian Linux Patch available Fix from $1,6002018-01-23 HIGH 8.2 CVE-2017-14457 An exploitable information leak/denial of service vulnerability exists in the libevm (Ethereum Virtual Machine) `create2` opcode handler of CPP-Ether… Ethereum Virtual Machine Mitigation only Fix from $1,9502018-01-19 HIGH 7.8 CVE-2018-5698 libreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer over-read via an unterminated string. Readstat No fix yet Fix from $1,9502018-01-14 HIGH 8.8 CVE-2018-5360 LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/t… Libtiff 4.0.6+ Fix from $1,9502018-01-14 HIGH 7.5 CVE-2017-9712 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, if userspace provides a too-large IE … Android Patch available Fix from $1,9502018-01-10 HIGH 7.5 CVE-2018-4871 An Out-of-bounds Read issue was discovered in Adobe Flash Player before 28.0.0.137. This vulnerability occurs because of computation that reads data … Enterprise Linux Desktop after 28.0.0.126 Fix from $1,9502018-01-09 HIGH 8.8 CVE-2018-5248 In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, related to the sixel_decode fun… Debian Linux No fix yet Fix from $1,9502018-01-05 HIGH 7.1 CVE-2017-4948 VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0) contain an out-of-bounds read vulnerability in TPView.dll… Workstation 4.7+ Fix from $1,9502018-01-05 MEDIUM 5.3 CVE-2018-0780EPSS 51% Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further comp… Edge 1.7.6+ Fix from $1,6002018-01-04 MEDIUM 5.3 CVE-2018-0767EPSS 58% Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise… Chakracore 1.7.6+ Fix from $1,6002018-01-04 HIGH 7.5 CVE-2017-18009 In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp. Opencv Mitigation only Fix from $1,9502018-01-01 HIGH 8.8 CVE-2017-17942 In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c. Libtiff No fix yet Fix from $1,9502017-12-28 HIGH 8.8 CVE-2017-17912 In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads… Debian Linux Patch available Fix from $1,9502017-12-27 HIGH 8.8 CVE-2017-17913 In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility… Debian Linux Patch available Fix from $1,9502017-12-27 HIGH 8.8 CVE-2017-17915 In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte bef… Debian Linux Patch available Fix from $1,9502017-12-27 HIGH 7.5 CVE-2017-17935 The File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attac… Wireshark after 2.2.11 Fix from $1,9502017-12-27 HIGH 8.8 CVE-2017-17879 In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculati… Ubuntu Linux Mitigation only Fix from $1,9502017-12-27 HIGH 8.8 CVE-2017-17880 In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBP_DECODER_… Imagemagick Mitigation only Fix from $1,9502017-12-27