Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5,222

Export CSV
CVE-2016-10272

libtiff: Heap-based buffer overflow in tif_next.c

LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "WRITE of size 2048" and libtiff/tif_next.c:64:9.

CVSS 3.0 · 7.8 High EPSS 1.9% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-10271

libtiff: Heap-based buffer overflow in tif_fax3.c

tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 1" and libtiff/tif_fax3.c:413:13.

CVSS 3.0 · 7.8 High EPSS 2.2% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-10270

libtiff: Heap-based buffer overflow in tiff_read.c

LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 8" and libtiff/tif_read.c:523:22.

CVSS 3.0 · 7.8 High EPSS 2.3% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-10269

libtiff: Heap-based buffer overflow in tiff_unix.c

LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2.

CVSS 3.0 · 7.8 High EPSS 2.4% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-10253

erlang: Heap-buffer overflow via regular expressions

An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap overflow. Regular expressions using a malformed extpattern can indirectly specify an offset that is used as an array index. This ordinal permits arbitrary regions within the erts_alloc arena to be both read and written to.

CVSS 3.0 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Erlang
Products
Erlang\/otp
CVE-2016-10249

jasper: integer overflow in jas_matrix_create()

Integer overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow.

CVSS 3.0 · 7.8 High EPSS 2.0% KEV · Not listed
Vendors
Jasper Project Redhat
Products
Jasper Enterprise Linux
CVE-2016-10169

wavpack: Global buffer overread in read_code / read_words.c

The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Wavpack Project
Products
Wavpack
CVE-2016-10094

libtiff: Off-by-one error in t2p_readwrite_pdf_image_tile() causing heap buffer overflow

Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-10093

libtiff: Integer overflow in DECLAREreadFunc

Integer overflow in tools/tiffcp.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5 and 4.0.6 allows remote attackers to have unspecified impact via a crafted image, which triggers a heap-based buffer overflow.

CVSS 3.0 · 7.8 High EPSS 2.0% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2015-8666

Qemu: acpi: heap based buffer overrun during VM migration

Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator.

CVSS 3.1 · 7.9 High EPSS < 1% KEV · Not listed
Vendors
Debian Qemu
Products
Debian Linux Qemu
CVE-2014-9922

kernel: Privilege escalation in eCryptfs subsystem via a large filesystem stack

The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer, related to fs/ecryptfs/main.c and fs/overlayfs/super.c.

CVSS 3.0 · 7.8 High EPSS 1.3% KEV · Not listed
Vendors
Google Linux
Products
Android Linux Kernel
CVE-2014-9835

ImageMagick: heap overflow in wpf file

Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file.

CVSS 3.0 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2014-9834

ImageMagick: heap overflow in pict file

Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file.

CVSS 3.0 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2014-9833

ImageMagick: heap overflow in psd file

Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file.

CVSS 3.0 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2014-9832

ImageMagick: heap overflow in pcx file

Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file.

CVSS 3.0 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2014-9825

ImageMagick: heap overflow in corrupted psd file

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerability than CVE-2014-9824.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2014-9824

ImageMagick: heap overflow in psd file

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerability than CVE-2014-9825.

CVSS 3.1 · 7.8 High EPSS 1.6% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2014-9823

ImageMagick: heap overflow in palm file

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerability than CVE-2014-9819.

CVSS 3.1 · 7.8 High EPSS 1.6% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2014-9822

ImageMagick: heap overflow in quantum file

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted quantum file.

CVSS 3.1 · 7.8 High EPSS 1.6% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2014-9820

ImageMagick: heap overflow in xpm files

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pnm file.

CVSS 3.1 · 7.8 High EPSS 1.6% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick