2018

When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be

The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to

IMFCameraProtect.sys in IObit Malware Fighter 6.2 (and possibly lower versions) is vulnerable to a stack-based buffer ov

In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting i

Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdrag

When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can

While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size o

Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobi

Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdra

Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, S

Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Sna

While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Sn

Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small

While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due to

A UrlfWTPPagePtr KERedirect Use-After-Free Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer

A ctl_set KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (

A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer

A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer

A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer

Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable sit

A remote code execution vulnerability exists in the Yammer desktop application due to the loading of arbitrary content,

Advantech WebAccess 8.3.1 and earlier has an improper privilege management vulnerability, which may allow an attacker to

A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow an authenticated, loca

An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. T

An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. A

An uncontrolled search path element (DLL Hijacking) vulnerability has been identified in Fuji Electric Energy Savings Es

* Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated i

An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Aler

The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users t

Crossroads 2.81 does not properly handle the /tmp directory during a build of xr. A local attacker can first create a wo

The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext. The location

During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automo

Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon We

ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W

XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unuse

When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Sna

Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version I

A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845,

A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206,

Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdrag

Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Au

Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdrag

Lack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon Mobile in version SD 8

Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850

There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Aut

While processing logs, data is copied into a buffer pointed to by an untrusted pointer in Snapdragon Mobile, Snapdragon

Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using th

A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution

A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV (matroska) file format. A sp

An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method