Browse CVEs

HIGH 7.0 CVE-2017-8267 In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leading to an… Android Mitigation only Fix from $1,9502017-08-18 CRITICAL 9.8 CVE-2015-9062 In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when load… Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2016-10346 In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor. Android Mitigation only Fix from $2,3002017-08-18 HIGH 8.8 CVE-2017-12863 In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_pitch. If the image is from r… Debian Linux after 3.3.0 Fix from $1,9502017-08-15 HIGH 8.8 CVE-2017-12864 In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is… Debian Linux after 3.3.0 Fix from $1,9502017-08-15 HIGH 7.0 CVE-2014-0143 Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service (crash) via a crafted … Enterprise Linux after 1.7.1 Fix from $1,9502017-08-10 HIGH 7.8 CVE-2017-0729 A elevation of privilege vulnerability in the Android media framework (mediadrmserver). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.… Android Patch available Fix from $1,9502017-08-09 CRITICAL 9.1 CVE-2015-2310 Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service or p… Capnproto 0.4.1.1 / 0.5.1.1+ Fix from $2,3002017-08-09 HIGH 7.5 CVE-2017-12425 An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0 through 5.1.2. A wrong if statement in the v… Varnish Mitigation only Fix from $1,9502017-08-04 HIGH 7.8 CVE-2017-9835 The gs_alloc_ref_array function in psi/ialloc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (heap-based buffer o… Debian Linux No fix yet Fix from $1,9502017-07-26 MEDIUM 5.5 CVE-2017-7542 The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3 allows local users to cause a denial of service (intege… Linux Kernel after 4.12.3 Fix from $1,6002017-07-21 HIGH 8.1 CVE-2017-9765EPSS 25% Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote at… Gsoap No fix yet Fix from $1,9502017-07-20 HIGH 7.5 CVE-2017-7529EPSS 63% Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into le… Nginx 13.0 / 2016.4.7+ Fix from $1,9502017-07-13 HIGH 8.8 CVE-2017-2820 An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Poppler 0.53.0. A specially craf… Poppler No fix yet Fix from $1,9502017-07-12 MEDIUM 5.5 CVE-2017-0691 A denial of service vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36724453. Android No fix yet Fix from $1,6002017-07-06 HIGH 7.8 CVE-2017-0702 A remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-36621442. Android Mitigation only Fix from $1,9502017-07-06 MEDIUM 6.5 CVE-2017-10791 There is an Integer overflow in the hash_int function of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the … Pspp No fix yet Fix from $1,6002017-07-02 MEDIUM 6.8 CVE-2017-9831 An integer overflow vulnerability in the ptp_unpack_EOS_CustomFuncEx function of the ptp-pack.c file of libmtp (version 1.1.12 and below) allows atta… Libmtp Patch available Fix from $1,6002017-06-24 MEDIUM 6.8 CVE-2017-9832 An integer overflow vulnerability in ptp-pack.c (ptp_unpack_OPL function) of libmtp (version 1.1.12 and below) allows attackers to cause a denial of … Libmtp after 1.1.12 Fix from $1,6002017-06-24 CRITICAL 9.1 CVE-2017-2782 An integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 cer… Matrixssl No fix yet Fix from $2,3002017-06-22 HIGH 7.8 CVE-2017-9776 Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of … Debian Linux after 0.55.0 Fix from $1,9502017-06-22 CRITICAL 9.8 CVE-2012-6706EPSS 10% A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other pro… Threat Detection Engine after 5.5.4 Fix from $2,3002017-06-22 HIGH 7.8 CVE-2017-2813 An exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of IrfanView 4.44. A specially crafted jpeg2000 image can … Irfanview Mitigation only Fix from $1,9502017-06-21 HIGH 7.8 CVE-2014-9964 In all Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in debug functionality. Android No fix yet Fix from $1,9502017-06-13 HIGH 7.8 CVE-2017-4913 VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain an integer-overflow vulnerability in the True Type Fon… Horizon View Mitigation only Fix from $1,9502017-06-08 HIGH 7.8 CVE-2014-9944 In the Secure File System in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potenti… Android Patch available Fix from $1,9502017-06-06 HIGH 7.8 CVE-2015-9005 In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist. Android Patch available Fix from $1,9502017-06-06 MEDIUM 6.5 CVE-2017-8782 The readString function in util/read.c and util/old/read.c in libming 0.4.8 allows remote attackers to cause a denial of service via a large file tha… Libming No fix yet Fix from $1,6002017-05-31 CRITICAL 9.8 CVE-2017-9196 libautotrace.a in AutoTrace 0.31.1 has a "negative-size-param" issue in the ReadImage function in input-tga.c:528:7. Autotrace Mitigation only Fix from $2,3002017-05-23 CRITICAL 9.8 CVE-2017-9197 libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:498:55. Autotrace Mitigation only Fix from $2,3002017-05-23