Search vulnerabilities

Results 4

Export CSV
CVE-2016-9840

zlib: Out-of-bound pointer arithmetic in inftrees.c

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

CVSS 3.1 · 8.8 High EPSS 4.9% KEV · Not listed
Vendors
Apple Boost Canonical and 6 more
Products
Iphone Os Mac Os X Tvos and 24 more
CVE-2008-0171

boost regular expression memory corruption flaws

regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
CVE-2008-0172

boost regular expression NULL dereference flaw

The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (NULL dereference and crash) via an invalid regular expression.

CVSS 2.0 · 5.0 Medium EPSS 2.0% KEV · Not listed
Vendors
CVE-2013-0252

boost: Certain invalid UTF-8 sequences accepted as valid

boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Products