Vulnerabilities (CVE)

Filtered by CWE-119
Total 11965 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-3670 1 Intel 1 Intel Smart Sound Technology 2018-10-01 7.2 HIGH 8.8 HIGH
Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a buffer overflow.
CVE-2018-14742 1 Pbc Project 1 Pbc 2018-09-26 5.0 MEDIUM 7.5 HIGH
An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in set_field_one in bootstrap.c during a memcpy.
CVE-2018-14738 1 Pbc Project 1 Pbc 2018-09-26 5.0 MEDIUM 7.5 HIGH
An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbc_rmessage_message in rmessage.c.
CVE-2018-14741 1 Pbc Project 1 Pbc 2018-09-26 5.0 MEDIUM 7.5 HIGH
An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbc_pattern_pack in pattern.c.
CVE-2018-14740 1 Pbc Project 1 Pbc 2018-09-26 5.0 MEDIUM 7.5 HIGH
An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in set_field_one in bootstrap.c while making a query.
CVE-2018-14739 1 Pbc Project 1 Pbc 2018-09-26 5.0 MEDIUM 7.5 HIGH
An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbc_pattern_set_default in pattern.c.
CVE-2018-14743 1 Pbc Project 1 Pbc 2018-09-26 5.0 MEDIUM 7.5 HIGH
An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in wiretype_decode in context.c.
CVE-2013-3475 1 Ibm 3 Db2, Db2 Connect, Smart Analytics System 7600 2018-09-25 7.2 HIGH N/A
Stack-based buffer overflow in db2aud in the Audit Facility in IBM DB2 and DB2 Connect 9.1, 9.5, 9.7, 9.8, and 10.1, as used in Smart Analytics System 7600 and other products, allows local users to gain privileges via unspecified vectors.
CVE-2013-4276 1 Littlecms 1 Little Cms Color Engine 2018-09-21 4.3 MEDIUM N/A
Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of service (crash) via a crafted (1) ICC color profile to the icctrans utility or (2) TIFF image to the tiffdiff utility.
CVE-2018-14564 1 Thunlp 1 Thulac 2018-09-20 7.5 HIGH 9.8 CRITICAL
An issue was discovered in libthulac.so in THULAC through 2018-02-25. A SEGV can occur in NGramFeature::find_bases in include/cb_ngram_feature.h.
CVE-2018-14563 1 Thunlp 1 Thulac 2018-09-20 7.5 HIGH 9.8 CRITICAL
An issue was discovered in libthulac.so in THULAC through 2018-02-25. "operator delete" is used with "operator new[]" in the TaggingLearner class in include/cb_tagging_learner.h, possibly leading to memory corruption.
CVE-2018-14531 1 Axiosys 1 Bento4 2018-09-19 7.5 HIGH 9.8 CRITICAL
An issue was discovered in Bento4 1.5.1-624. There is an unspecified "heap-buffer-overflow" crash in the AP4_HvccAtom class in Core/Ap4HvccAtom.cpp.
CVE-2017-14260 1 Axiosys 1 Bento4 2018-09-19 6.8 MEDIUM 7.8 HIGH
In the SDK in Bento4 1.5.0-616, the AP4_StssAtom class in Ap4StssAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file.
CVE-2018-14586 1 Axiosys 1 Bento4 2018-09-18 6.8 MEDIUM 8.8 HIGH
An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4_Mpeg2TsAudioSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp, a different vulnerability than CVE-2018-14532.
CVE-2018-14338 1 Exiv2 1 Exiv2 2018-09-17 6.8 MEDIUM 8.1 HIGH
samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not used, possibly leading to a buffer overflow.
CVE-2018-14521 1 Aubio 1 Aubio 2018-09-17 6.8 MEDIUM 8.8 HIGH
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_source_avcodec_readframe in io/source_avcodec.c, as demonstrated by aubiomfcc.
CVE-2018-7546 1 Kingsoft 2 Jinshan Pdf, Wps Office 2018-09-14 4.3 MEDIUM 5.5 MEDIUM
wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621 allows remote attackers to cause a denial of service via a crafted pdf file.
CVE-2018-10018 1 Gdata-software 1 Total Security 2018-09-11 6.8 MEDIUM 8.8 HIGH
The GDASPAMLib.AntiSpam ActiveX control ASK\GDASpam.dll in G DATA Total Security 25.4.0.3 has a buffer overflow via a long IsBlackListed argument.
CVE-2018-5885 1 Qualcomm 24 Msm8909w, Msm8909w Firmware, Msm8996au and 21 more 2018-09-10 7.5 HIGH 9.8 CRITICAL
While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and Snapdragon Wear.
CVE-2018-5878 1 Qualcomm 24 Mdm9206, Mdm9206 Firmware, Mdm9607 and 21 more 2018-09-10 7.5 HIGH 9.8 CRITICAL
While sending the response to a RIL_REQUEST_GET_SMSC_ADDRESS message, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.