CWE-129 Archives - CVE Vulnerability

CVE-2018-7406

Sun, 26 Feb 2023 06:51:02 +0000

An issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1. This vulnerability allows remote attackers to execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the u3d images inside of a pdf. The issue results from the lack of proper validation of user-supplied data, which can result in an array indexing issue. An attacker can leverage this to execute code in the context of the current process.

The post CVE-2018-7406 appeared first on CVE Vulnerability.

CVE-2018-5883

Sun, 26 Feb 2023 06:50:30 +0000

Buffer overflow in WLAN driver event handlers due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS405, QCS605, SD 636, SD 675, SD 730, SD 820A, SD 835, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

The post CVE-2018-5883 appeared first on CVE Vulnerability.

CVE-2018-5894

Sun, 26 Feb 2023 06:50:30 +0000

Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur.

The post CVE-2018-5894 appeared first on CVE Vulnerability.

CVE-2018-5903

Sun, 26 Feb 2023 06:50:30 +0000

Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

The post CVE-2018-5903 appeared first on CVE Vulnerability.

CVE-2018-5914

Sun, 26 Feb 2023 06:50:30 +0000

Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in Snapdragon Mobile, Snapdragon Wear version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660.

The post CVE-2018-5914 appeared first on CVE Vulnerability.

CVE-2018-5838

Sun, 26 Feb 2023 06:50:29 +0000

Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur in SurfaceFlinger.

The post CVE-2018-5838 appeared first on CVE Vulnerability.

CVE-2018-5851

Sun, 26 Feb 2023 06:50:29 +0000

Buffer over flow can occur while processing a HTT_T2H_MSG_TYPE_TX_COMPL_IND message with an out-of-range num_msdus value in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

The post CVE-2018-5851 appeared first on CVE Vulnerability.

CVE-2018-4210

Sun, 26 Feb 2023 06:49:59 +0000

In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue existed in the handling of a function in javascript core. This issue was addressed with improved checks.

The post CVE-2018-4210 appeared first on CVE Vulnerability.

CVE-2018-3576

Sun, 26 Feb 2023 06:49:43 +0000

improper validation of array index in WiFi driver function sapInterferenceRssiCount() leads to array out-of-bounds access in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

The post CVE-2018-3576 appeared first on CVE Vulnerability.

CVE-2018-17848

Sun, 26 Feb 2023 06:47:35 +0000

The html package (aka x/net/html) through 2018-09-25 in Go mishandles , leading to a “panic: runtime error” (index out of range) in (*insertionModeStack).pop in node.go, called from inHeadIM, during an html.Parse call.

The post CVE-2018-17848 appeared first on CVE Vulnerability.