CVE-2016-10094

libtiff: Off-by-one error in t2p_readwrite_pdf_image_tile() causing heap buffer overflow

Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed

Vendors

Libtiff

Products

Libtiff

CVE-2016-10169

wavpack: Global buffer overread in read_code / read_words.c

The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed

Vendors

Wavpack Project

Products

Wavpack

CVE-2016-10249

jasper: integer overflow in jas_matrix_create()

Integer overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow.

CVSS 3.0 · 7.8 High EPSS 2.0% KEV · Not listed

Vendors

Jasper Project Redhat

Products

Jasper Enterprise Linux

CVE-2016-10253

erlang: Heap-buffer overflow via regular expressions

An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap overflow. Regular expressions using a malformed extpattern can indirectly specify an offset that is used as an array index. This ordinal permits arbitrary regions within the erts_alloc arena to be both read and written to.

CVSS 3.0 · 9.8 Critical EPSS 1.5% KEV · Not listed

Vendors

Erlang

Products

Erlang\/otp

CVE-2016-10269

libtiff: Heap-based buffer overflow in tiff_unix.c

LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2.

CVSS 3.0 · 7.8 High EPSS 2.4% KEV · Not listed

Vendors

Libtiff

Products

Libtiff

CVE-2016-10270

libtiff: Heap-based buffer overflow in tiff_read.c

LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 8" and libtiff/tif_read.c:523:22.

CVSS 3.0 · 7.8 High EPSS 2.3% KEV · Not listed

Vendors

Libtiff

Products

Libtiff

CVE-2016-10271

libtiff: Heap-based buffer overflow in tif_fax3.c

tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 1" and libtiff/tif_fax3.c:413:13.

CVSS 3.0 · 7.8 High EPSS 2.2% KEV · Not listed

Vendors

Libtiff

Products

Libtiff

CVE-2016-10272

libtiff: Heap-based buffer overflow in tif_next.c

LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "WRITE of size 2048" and libtiff/tif_next.c:64:9.

CVSS 3.0 · 7.8 High EPSS 1.9% KEV · Not listed

Vendors

Libtiff

Products

Libtiff

CVE-2016-10317

ghostscript: Heap-buffer overflow in the fill_threshold_buffer function

The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PostScript document.

CVSS 3.0 · 7.8 High EPSS 2.3% KEV · Not listed

Vendors

Artifex

Products

Ghostscript

CVE-2016-10327

libreoffice: Heap-buffer-overflow in EnhWMFReader::ReadEnhWMF

LibreOffice before 2016-12-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the EnhWMFReader::ReadEnhWMF function in vcl/source/filter/wmf/enhwmf.cxx.

CVSS 3.0 · 9.8 Critical EPSS 3.6% KEV · Not listed

Vendors

Libreoffice

Products

Libreoffice

CVE-2016-10328

freetype: heap-based buffer overflow related to the cff_parser_run function

FreeType 2 before 2016-12-16 has an out-of-bounds write caused by a heap-based buffer overflow related to the cff_parser_run function in cff/cffparse.c.

CVSS 3.1 · 9.8 Critical EPSS 3.7% KEV · Not listed

Vendors

Freetype Oracle

Products

Freetype Outside In Technology

CVE-2016-10349

libarchive: Heap-based buffer over-read in the archive_le32dec function

The archive_le32dec function in archive_endian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 1.7% KEV · Not listed

Vendors

Libarchive

Products

Libarchive

CVE-2016-10350

libarchive: Heap-based buffer over-read in the archive_read_format_cab_read_header function

The archive_read_format_cab_read_header function in archive_read_support_format_cab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed

Vendors

Libarchive

Products

Libarchive

CVE-2016-10504

openjpeg: Heap-based buffer over-write in in opj_mqc_byteout function of mqc.c

Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (application crash) via a crafted bmp file.

CVSS 3.0 · 6.5 Medium EPSS 8.2% KEV · Not listed

Vendors

Uclouvain

Products

Openjpeg

CVE-2016-7535

ImageMagick: out of bound access for corrupted psd file

coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PSD file.

CVSS 3.1 · 6.5 Medium EPSS 3.3% KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2016-2226

gcc: Exploitable buffer overflow

Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow.

CVSS 3.0 · 7.8 High EPSS 7.2% KEV · Not listed

Vendors

Gnu

Products

Libiberty

CVE-2016-2339

ruby: Fiddle:: Function.new heap buffer overflow

An exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize" function functionality of Ruby. In Fiddle::Function.new "initialize" heap buffer "arg_types" allocation is made based on args array length. Specially constructed object passed as element of args array can increase this array size after mentioned allocation and cause heap overflow.

CVSS 3.0 · 9.8 Critical EPSS 5.1% KEV · Not listed

Vendors

Ruby-lang

Products

Ruby

CVE-2016-2368

pidgin: MXIT g_snprintf Multiple Buffer Overflow Vulnerabilities

Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could result in multiple buffer overflows, potentially resulting in code execution or memory disclosure.

CVSS 3.0 · 8.1 High EPSS 4.6% KEV · Not listed

Vendors

Canonical Debian Pidgin

Products

Ubuntu Linux Debian Linux Pidgin

CVE-2016-2376

pidgin: MXIT read stage 0x3 Code Execution Vulnerability

A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution. A malicious server or an attacker who intercepts the network traffic can send an invalid size for a packet which will trigger a buffer overflow.

CVSS 3.0 · 8.1 High EPSS 3.7% KEV · Not listed

Vendors

Canonical Debian Pidgin

Products

Ubuntu Linux Debian Linux Pidgin

CVE-2016-2377

pidgin: MXIT HTTP Content-Length Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent by the server could potentially result in an out-of-bounds write of one byte. A malicious server can send a negative content-length in response to a HTTP request triggering the vulnerability.

CVSS 3.0 · 8.1 High EPSS 2.6% KEV · Not listed

Vendors

Canonical Debian Pidgin

Products

Ubuntu Linux Debian Linux Pidgin