Browse CVEs

CRITICAL 9.8 CVE-2020-11196 u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Com… Apq8009 Firmware Mitigation only Fix from $2,3002020-11-12 HIGH 7.8 CVE-2020-11205 u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, Snapdragon … Qsm8350 Firmware Mitigation only Fix from $1,9502020-11-12 CRITICAL 9.8 CVE-2020-0452 In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution… Fedora Patch available Fix from $2,3002020-11-10 HIGH 7.8 CVE-2020-0409 In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with n… Android Patch available Fix from $1,9502020-11-10 CRITICAL 9.8 CVE-2020-28371 An issue was discovered in ReadyTalk Avian 1.2.0 before 2020-10-27. The FileOutputStream.write() method in FileOutputStream.java has a boundary check… Avian Patch available Fix from $2,3002020-11-09 HIGH 8.8 CVE-2020-15974 Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chrome 86.0.4240.75+ Fix from $1,9502020-11-03 HIGH 8.8 CVE-2020-15975 Integer overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 86.0.4240.75+ Fix from $1,9502020-11-03 MEDIUM 6.5 CVE-2020-15986 Integer overflow in media in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 86.0.4240.75+ Fix from $1,6002020-11-03 CRITICAL 9.1 CVE-2020-11169 u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon C… Apq8009 Firmware Mitigation only Fix from $2,3002020-11-02 CRITICAL 9.1 CVE-2019-16127 Atmel Advanced Software Framework (ASF) 4 has an Integer Overflow. Advanced Software Framework 4 No fix yet Fix from $2,3002020-10-22 HIGH 7.8 CVE-2020-9875 An integer overflow was addressed through improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13… Icloud 6.2.8 / 7.20+ Fix from $1,9502020-10-22 HIGH 8.8 CVE-2020-26682 In libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer overflow. Libass Patch available Fix from $1,9502020-10-16 HIGH 7.8 CVE-2020-0408 In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with … Android Mitigation only Fix from $1,9502020-10-14 CRITICAL 9.8 CVE-2020-16124 Integer Overflow or Wraparound vulnerability in the XML RPC library of OpenRobotics ros_comm communications packages allows unauthenticated network t… Ros Comm 1.15.9+ Fix from $2,3002020-10-13 HIGH 7.2 CVE-2020-24397EPSS 28% An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An attacker-controlled server can trigger an integer o… Manageengine Desktop Central Mitigation only Fix from $1,9502020-10-02 HIGH 7.5 CVE-2020-24213 An integer overflow was discovered in YGOPro ygocore v13.51. Attackers can use it to leak the game server thread's memory. Ygocore No fix yet Fix from $1,9502020-09-23 MEDIUM 6.3 CVE-2020-6569 Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who had compromised the renderer process to potentially e… Chrome 85.0.4183.83+ Fix from $1,6002020-09-21 MEDIUM 6.7 CVE-2020-0309 In the Bluetooth server, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with Sy… Android Mitigation only Fix from $1,6002020-09-18 HIGH 7.8 CVE-2020-0369 In libavb, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional ex… Android Mitigation only Fix from $1,9502020-09-17 HIGH 7.8 CVE-2020-0346 In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if integer sanit… Android Mitigation only Fix from $1,9502020-09-17 HIGH 8.8 CVE-2020-0264 In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional ex… Android Mitigation only Fix from $1,9502020-09-17 HIGH 7.8 CVE-2020-0432 In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege… Android Patch available Fix from $1,9502020-09-17 HIGH 7.5 CVE-2020-0381 In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure in … Android Patch available Fix from $1,9502020-09-17 HIGH 7.8 CVE-2020-6113EPSS 69% An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when updating its cros… Nitro Pro No fix yet Fix from $1,9502020-09-17 HIGH 7.8 CVE-2020-6116EPSS 28% An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242. When drawing the con… Nitro Pro No fix yet Fix from $1,9502020-09-17 MEDIUM 6.5 CVE-2020-3990 VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflo… Horizon Client 5.4.4 / 16.0.0+ Fix from $1,6002020-09-16 HIGH 7.5 CVE-2020-25574 An issue was discovered in the http crate before 0.1.20 for Rust. An integer overflow in HeaderMap::reserve() could result in denial of service (e.g.… Http 0.1.20+ Fix from $1,9502020-09-14 HIGH 7.8 CVE-2020-14363 An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an application … Fedora 1.6.12+ Fix from $1,9502020-09-11 MEDIUM 5.5 CVE-2020-3620 u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to corruptio… Apq8009 Firmware Mitigation only Fix from $1,6002020-09-08 HIGH 7.8 CVE-2020-3624 u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snapdragon Au… Apq8009 Firmware Mitigation only Fix from $1,9502020-09-08