Browse CVEs

MEDIUM 5.5 CVE-2018-20671 load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buff… Binutils after 2.31.1 Fix from $1,6002019-01-04 HIGH 7.5 CVE-2018-18665 The mintToken function of Nexxus (NXX) aka NexxusToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the b… Nexxustoken No fix yet Fix from $1,9502018-12-28 HIGH 7.5 CVE-2018-18666 The mintToken function of SwftCoin (SWFTC) aka SwftCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the … Swftcoin No fix yet Fix from $1,9502018-12-28 HIGH 7.5 CVE-2018-18667 The mintToken function of Pylon (PYLNT) aka PylonToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the b… Pylontoken No fix yet Fix from $1,9502018-12-28 HIGH 8.8 CVE-2018-20545 There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 4bpp data. Ubuntu Linux Patch available Fix from $1,9502018-12-28 HIGH 8.1 CVE-2018-20546 There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for the default bpp case. Ubuntu Linux Patch available Fix from $1,9502018-12-28 HIGH 7.5 CVE-2018-20406EPSS 6% Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled during a "resize to twice the size"… Python 3.7.1+ Fix from $1,9502018-12-23 HIGH 8.1 CVE-2018-20346EPSS 10% SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur … SQLite 3.25.3 / 71.0.3578.80+ Fix from $1,9502018-12-21 HIGH 8.8 CVE-2018-20330 The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplic… Libjpeg Turbo Patch available Fix from $1,9502018-12-21 HIGH 7.8 CVE-2018-1000876 binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_re… Ubuntu Linux 2.32+ Fix from $1,9502018-12-20 HIGH 7.8 CVE-2018-11985 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, When allocating heap using user supplied s… Android Patch available Fix from $1,9502018-12-20 HIGH 8.1 CVE-2018-11458 A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUM… Sinumerik 828d V4.7 Firmware after 4.8 Fix from $1,9502018-12-12 HIGH 8.8 CVE-2018-18341 An integer overflow leading to a heap buffer overflow in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploi… Chrome 71.0.3578.80+ Fix from $1,9502018-12-11 HIGH 8.8 CVE-2018-18356 An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially… Chrome 71.0.3578.80+ Fix from $1,9502018-12-11 CRITICAL 9.8 CVE-2016-10502 While generating trusted application id, An integer overflow can occur giving the trusted application an invalid identity in Snapdragon Mobile and Sn… Mdm9206 Firmware Mitigation only Fix from $2,3002018-12-10 MEDIUM 6.5 CVE-2018-5815 An integer overflow error within the "parse_qt()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.12 can be exploited to trigge… Ubuntu Linux 0.18.12+ Fix from $1,6002018-12-07 MEDIUM 6.5 CVE-2018-5816 An integer overflow error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.12 can be exploited to trigge… Ubuntu Linux 0.18.12+ Fix from $1,6002018-12-07 CRITICAL 9.8 CVE-2018-18311EPSS 12% Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations. Perl 5.26.3 / 5.28.1+ Fix from $2,3002018-12-07 MEDIUM 5.5 CVE-2018-19932 An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is an integer ov… Binutils after 2.31 Fix from $1,6002018-12-07 MEDIUM 5.7 CVE-2018-19665 The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption. Qemu after 3.0.1 Fix from $1,6002018-12-06 CRITICAL 9.8 CVE-2018-9556 In ParsePayloadHeader of payload_metadata.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalatio… Android Patch available Fix from $2,3002018-12-06 HIGH 7.5 CVE-2018-9565 In readBytes of xltdecwbxml.c, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure wi… Android Mitigation only Fix from $1,9502018-12-06 HIGH 8.8 CVE-2018-6090 An integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrar… Chrome 66.0.3359.117+ Fix from $1,9502018-12-04 HIGH 8.8 CVE-2018-6092EPSS 9% An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code insi… Chrome 66.0.3359.117+ Fix from $1,9502018-12-04 CRITICAL 9.8 CVE-2018-17157EPSS 24% In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error when handling opcodes can cause memory corruption by sending a … FreeBSD 11.2+ Fix from $2,3002018-12-04 HIGH 7.5 CVE-2018-17158 In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error can occur when handling the client address length field in an N… FreeBSD 11.2+ Fix from $1,9502018-12-04 CRITICAL 9.8 CVE-2018-8787EPSS 8% FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and re… Ubuntu Linux Patch available Fix from $2,3002018-11-29 HIGH 8.8 CVE-2018-6983 VMware Workstation (15.x before 15.0.2 and 14.x before 14.1.5) and Fusion (11.x before 11.0.2 and 10.x before 10.1.5) contain an integer overflow vul… Workstation 10.1.5 / 11.0.2+ Fix from $1,9502018-11-27 HIGH 7.8 CVE-2018-11260 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing a fast Initial link setup… Android Patch available Fix from $1,9502018-11-27 HIGH 8.8 CVE-2018-6065 KEVEPSS 60% Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 a… Chrome 65.0.3325.146+ Fix from $1,9502018-11-14