Browse CVEs

HIGH 7.8 CVE-2019-2297 Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity… Apq8009 Firmware Patch available Fix from $1,9502019-11-21 CRITICAL 9.8 CVE-2019-10627 Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to in… Ips 001.1937c / 001.1937d+ Fix from $2,3002019-11-21 CRITICAL 9.8 CVE-2019-19012EPSS 11% An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offse… Debian Linux after 6.9.3 Fix from $2,3002019-11-17 MEDIUM 6.5 CVE-2010-4653 An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts. Debian Linux 0.16.3+ Fix from $1,6002019-11-13 HIGH 7.8 CVE-2019-5287 P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer overflow vulnerability due to insufficient check on spe… P30 Firmware Mitigation only Fix from $1,9502019-11-13 HIGH 7.8 CVE-2019-5288 P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer overflow vulnerability due to insufficient check on spe… P30 Firmware Mitigation only Fix from $1,9502019-11-13 CRITICAL 9.8 CVE-2019-18805 An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in t… Linux Kernel 4.4.180 / 4.9.172+ Fix from $2,3002019-11-07 HIGH 7.8 CVE-2019-5100 An exploitable integer overflow vulnerability exists in the BMP header parsing functionality of LEADTOOLS 20. A specially crafted BMP image file can … Leadtools No fix yet Fix from $1,9502019-11-06 HIGH 7.5 CVE-2011-1298 An Integer Overflow exists in WebKit in Google Chrome before Blink M11 in the macOS WebCore::GraphicsContext::fillRect function. Blink Patch available Fix from $1,9502019-11-06 CRITICAL 9.8 CVE-2019-2302 While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead to heap overflow. in Snapdra… Apq8017 Firmware Mitigation only Fix from $2,3002019-11-06 CRITICAL 9.8 CVE-2019-2331 Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapdragon Com… Mdm9150 Firmware Patch available Fix from $2,3002019-11-06 HIGH 7.8 CVE-2019-5089 An exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 4.0.7 x64. A specially crafted JPEG file can cause an… Able2extract No fix yet Fix from $1,9502019-11-05 CRITICAL 9.8 CVE-2019-17211 An integer overflow was discovered in the CoAP library in Arm Mbed OS 5.14.0. The function sn_coap_builder_calc_needed_packet_data_size_2() is used t… Mbed No fix yet Fix from $2,3002019-11-05 HIGH 7.8 CVE-2017-5331 Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to cause a denial of service (pro… Ubuntu Linux 0.31.1+ Fix from $1,9502019-11-04 HIGH 7.8 CVE-2017-5333 Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 allows local users to cause a d… Enterprise Linux Patch available Fix from $1,9502019-11-04 HIGH 7.8 CVE-2002-2439 Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts. Gcc 4.8.0+ Fix from $1,9502019-10-23 HIGH 8.1 CVE-2019-17498 In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to s… Fedora after 1.9.0 Fix from $1,9502019-10-21 HIGH 8.8 CVE-2019-17546 tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-ba… Libtiff 4.1.0+ Fix from $1,9502019-10-14 MEDIUM 6.5 CVE-2019-17451 An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an integer overflow lead… Ubuntu Linux No fix yet Fix from $1,6002019-10-10 HIGH 7.8 CVE-2019-16905 OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or ser… Openssh 3.2.7 / 8.1+ Fix from $1,9502019-10-09 HIGH 7.8 CVE-2018-16301 The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacke… Tcpdump 4.99.0+ Fix from $1,9502019-10-03 HIGH 7.8 CVE-2019-16508 The Imagination Technologies driver for Chrome OS before R74-11895.B, R75 before R75-12105.B, and R76 before R76-12208.0.0 allows attackers to trigge… Chrome Os No fix yet Fix from $1,9502019-10-01 HIGH 7.8 CVE-2019-11927 An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted … Whatsapp 2.9.143 / 2.19.100+ Fix from $1,9502019-09-27 MEDIUM 5.0 CVE-2019-9421 In libandroidfw, there is a possible OOB read due to an integer overflow. This could lead to local information disclosure with no additional executio… Android Mitigation only Fix from $1,6002019-09-27 MEDIUM 6.5 CVE-2019-9420 In libhevc, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service with no additional executi… Android Mitigation only Fix from $1,6002019-09-27 HIGH 8.8 CVE-2019-9405 In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional executi… Android Mitigation only Fix from $1,9502019-09-27 HIGH 8.8 CVE-2019-9357 In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional executi… Android Mitigation only Fix from $1,9502019-09-27 HIGH 7.5 CVE-2019-9311 In Bluetooth, there is a possible crash due to an integer overflow. This could lead to remote denial of service on incoming calls with no additional … Android Mitigation only Fix from $1,9502019-09-27 HIGH 8.8 CVE-2019-9297 In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional executi… Android Mitigation only Fix from $1,9502019-09-27 HIGH 8.8 CVE-2019-9298 In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional executi… Android Mitigation only Fix from $1,9502019-09-27