Browse CVEs

CRITICAL 9.8 CVE-2019-10572 Improper check in video driver while processing data from video firmware can lead to integer overflow and then buffer overflow in Snapdragon Auto, Sn… Apq8009 Firmware Patch available Fix from $2,3002019-12-18 CRITICAL 9.8 CVE-2019-2242 Device memory may get corrupted because of buffer overflow/underflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connect… Apq8009 Firmware Mitigation only Fix from $2,3002019-12-18 HIGH 7.8 CVE-2019-10537 Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass the length check and eventually… Mdm9607 Firmware Patch available Fix from $1,9502019-12-18 MEDIUM 6.7 CVE-2019-14611 Integer overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access. Nuc 8 Mainstream Game Kit Firmware 0036 / 0043+ Fix from $1,6002019-12-16 HIGH 7.5 CVE-2019-18302 A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can tr… Sppa T3000 Ms3000 Migration Server No fix yet Fix from $1,9502019-12-12 HIGH 7.5 CVE-2019-18303 A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can tr… Sppa T3000 Ms3000 Migration Server No fix yet Fix from $1,9502019-12-12 HIGH 7.5 CVE-2019-18304 A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can tr… Sppa T3000 Ms3000 Migration Server No fix yet Fix from $1,9502019-12-12 HIGH 7.5 CVE-2019-18305 A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could … Sppa T3000 Ms3000 Migration Server No fix yet Fix from $1,9502019-12-12 HIGH 7.5 CVE-2019-18298 A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could … Sppa T3000 Ms3000 Migration Server No fix yet Fix from $1,9502019-12-12 HIGH 7.5 CVE-2019-18299 A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can tr… Sppa T3000 Ms3000 Migration Server No fix yet Fix from $1,9502019-12-12 HIGH 7.5 CVE-2019-18300 A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can tr… Sppa T3000 Ms3000 Migration Server No fix yet Fix from $1,9502019-12-12 HIGH 7.5 CVE-2019-18301 A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can tr… Sppa T3000 Ms3000 Migration Server No fix yet Fix from $1,9502019-12-12 HIGH 7.8 CVE-2019-10592 Possible integer overflow while multiplying two integers of 32 bit in QDCM API of get display modes as there is no check on the maximum mode count in… Apq8017 Firmware Mitigation only Fix from $1,9502019-12-12 HIGH 7.8 CVE-2019-10530 Lack of check of data truncation on user supplied data in kernel leads to buffer overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Ind… Mdm9150 Firmware Patch available Fix from $1,9502019-12-12 MEDIUM 5.5 CVE-2019-19746 make_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow typ… Fedora No fix yet Fix from $1,6002019-12-12 CRITICAL 9.8 CVE-2019-5085 An exploitable code execution vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0.2019.3.15. A spec… Leadtools Mitigation only Fix from $2,3002019-12-12 CRITICAL 9.8 CVE-2019-5093 An exploitable code execution vulnerability exists in the DICOM network response functionality of LEADTOOLS libltdic.so version 20.0.2019.3.15. A spe… Leadtools Mitigation only Fix from $2,3002019-12-12 HIGH 8.8 CVE-2019-13736 Integer overflow in PDFium in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF … Chrome 79.0.3945.79+ Fix from $1,9502019-12-10 CRITICAL 9.8 CVE-2019-19637 An issue was discovered in libsixel 1.8.2. There is an integer overflow in the function sixel_decode_raw_impl at fromsixel.c. Libsixel Mitigation only Fix from $2,3002019-12-08 CRITICAL 9.8 CVE-2019-19638 An issue was discovered in libsixel 1.8.2. There is a heap-based buffer overflow in the function load_pnm at frompnm.c, due to an integer overflow. Libsixel Mitigation only Fix from $2,3002019-12-08 CRITICAL 9.8 CVE-2019-19636 An issue was discovered in libsixel 1.8.2. There is an integer overflow in the function sixel_encode_body at tosixel.c. Libsixel Mitigation only Fix from $2,3002019-12-08 MEDIUM 5.3 CVE-2019-1551EPSS 14% There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analy… OpenSSL after 8.0.20 Fix from $1,6002019-12-06 HIGH 7.8 CVE-2019-19590 In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at libr/asm/asm.c. This integer … Radare2 after 4.0.0 Fix from $1,9502019-12-05 CRITICAL 9.8 CVE-2019-19307EPSS 42% An integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS (infinite loop), or possibly cause … Mongoose No fix yet Fix from $2,3002019-11-26 HIGH 8.8 CVE-2011-3631 Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string lengths concatenation is done i… Debian Linux 0.1.2+ Fix from $1,9502019-11-26 HIGH 8.8 CVE-2019-5854 Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF … Chrome 76.0.3809.87+ Fix from $1,9502019-11-25 MEDIUM 6.5 CVE-2019-5855 Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF … Chrome 76.0.3809.87+ Fix from $1,6002019-11-25 HIGH 7.8 CVE-2019-18675 The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 … Linux Kernel 3.16.60 / 3.18.113+ Fix from $1,9502019-11-25 HIGH 8.8 CVE-2019-5087 An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm binaries of xcftools 1.0.7. An i… Debian Linux No fix yet Fix from $1,9502019-11-21 HIGH 8.8 CVE-2019-5086 An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm binaries of xcftools, version 1.… Debian Linux No fix yet Fix from $1,9502019-11-21