CWE-835 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-835/ Sun, 26 Feb 2023 06:51:48 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-835 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-835/ 32 32 CVE-2018-9444 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9444/ Sun, 26 Feb 2023 06:51:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9444/ In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead to remote temporary device denial of service (remote hang or reboot) with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android ID: A-63521984.

The post CVE-2018-9444 appeared first on CVE Vulnerability.

]]> In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead to remote temporary device denial of service (remote hang or reboot) with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android ID: A-63521984.

The post CVE-2018-9444 appeared first on CVE Vulnerability.

]]> CVE-2018-9251 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9251/ Sun, 26 Feb 2023 06:51:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9251/ The xz_decomp function in xzlib.c in libxml2 2.9.8, if –with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035.

The post CVE-2018-9251 appeared first on CVE Vulnerability.

]]> The xz_decomp function in xzlib.c in libxml2 2.9.8, if –with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035.

The post CVE-2018-9251 appeared first on CVE Vulnerability.

]]> CVE-2018-9257 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9257/ Sun, 26 Feb 2023 06:51:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9257/ In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-cql.c by checking for a nonzero number of columns.

The post CVE-2018-9257 appeared first on CVE Vulnerability.

]]> In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-cql.c by checking for a nonzero number of columns.

The post CVE-2018-9257 appeared first on CVE Vulnerability.

]]> CVE-2018-9058 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9058/ Sun, 26 Feb 2023 06:51:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9058/ In Long Range Zip (aka lrzip) 0.631, there is an infinite loop in the runzip_fd function of runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file.

The post CVE-2018-9058 appeared first on CVE Vulnerability.

]]> In Long Range Zip (aka lrzip) 0.631, there is an infinite loop in the runzip_fd function of runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file.

The post CVE-2018-9058 appeared first on CVE Vulnerability.

]]> CVE-2018-8036 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8036/ Sun, 26 Feb 2023 06:51:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8036/ In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox’s AFMParser.

The post CVE-2018-8036 appeared first on CVE Vulnerability.

]]> In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox’s AFMParser.

The post CVE-2018-8036 appeared first on CVE Vulnerability.

]]> CVE-2018-8002 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8002/ Sun, 26 Feb 2023 06:51:15 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8002/ In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.

The post CVE-2018-8002 appeared first on CVE Vulnerability.

]]> In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.

The post CVE-2018-8002 appeared first on CVE Vulnerability.

]]> CVE-2018-8017 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8017/ Sun, 26 Feb 2023 06:51:15 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8017/ In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser.

The post CVE-2018-8017 appeared first on CVE Vulnerability.

]]> In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser.

The post CVE-2018-8017 appeared first on CVE Vulnerability.

]]> CVE-2018-7751 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7751/ Sun, 26 Feb 2023 06:51:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7751/ The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a crafted XML file.

The post CVE-2018-7751 appeared first on CVE Vulnerability.

]]> The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a crafted XML file.

The post CVE-2018-7751 appeared first on CVE Vulnerability.

]]> CVE-2018-7453 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7453/ Sun, 26 Feb 2023 06:51:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7453/ Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking, as demonstrated by pdftohtml.

The post CVE-2018-7453 appeared first on CVE Vulnerability.

]]> Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking, as demonstrated by pdftohtml.

The post CVE-2018-7453 appeared first on CVE Vulnerability.

]]> CVE-2018-7421 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7421/ Sun, 26 Feb 2023 06:51:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7421/ In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dmp.c by correctly supporting a bounded number of Security Categories for a DMP Security Classification.

The post CVE-2018-7421 appeared first on CVE Vulnerability.

]]> In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dmp.c by correctly supporting a bounded number of Security Categories for a DMP Security Classification.

The post CVE-2018-7421 appeared first on CVE Vulnerability.

]]>