CVE-2020-0495 (v3: 5.5) 15 Dec 2020
In decode_Huffman of JBig2_SddProc.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local information discl... Read more ➔
CVE-2020-25675 8 Dec 2020
In the CropImage() and CropImageToTiles() routines of MagickCore/transform.c, rounding calculations performed on unconstrained pixel offsets was causi... Read more ➔
CVE-2020-25676 8 Dec 2020
In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /... Read more ➔
CVE-2020-27754 8 Dec 2020
In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller when ImageMa... Read more ➔
CVE-2020-27757 8 Dec 2020
A floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outs... Read more ➔
CVE-2020-27758 8 Dec 2020
A flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behav... Read more ➔
CVE-2020-25666 8 Dec 2020
There are 4 places in HistogramCompare() in MagickCore/histogram.c where an integer overflow is possible during simple math calculations. This occurs... Read more ➔
CVE-2020-0452 (v3: 9.8) 10 Nov 2020
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution... Read more ➔
CVE-2020-17396 25 Aug 2020
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain... Read more ➔
CVE-2020-15137 12 Aug 2020
All versions of HoRNDIS are affected by an integer overflow in the RNDIS packet parsing routines. A malicious USB device can trigger disclosure of unr... Read more ➔
CVE-2020-9841 (v3: 7.8) 9 Jun 2020
An integer overflow was addressed through improved input validation. This issue is fixed in macOS Catalina 10.15.5. An application may be able to exec... Read more ➔
CVE-2020-9852 (v3: 7.8) 9 Jun 2020
An integer overflow was addressed through improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.... Read more ➔
CVE-2019-14066 (v3: 7.8) 2 Jun 2020
Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Feature ID statu... Read more ➔
CVE-2020-3641 (v3: 9.8) 2 Jun 2020
Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon Compute,... Read more ➔
CVE-2019-20805 (v3: 5.5) 1 Jun 2020
p_lx_elf.cpp in UPX before 3.96 has an integer overflow during unpacking via crafted values in a PT_DYNAMIC segment. Read more ➔
CVE-2020-12826 (v3: 8.8) 12 May 2020
A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in include/linux/sched.h is only... Read more ➔
CVE-2020-12761 (v3: 9.1) 9 May 2020
modules/loaders/loader_ico.c in imlib2 1.6.0 has an integer overflow (with resultant invalid memory allocations and out-of-bounds reads) via an icon w... Read more ➔
CVE-2020-6094 (v3: 8.8) 6 May 2020
An exploitable code execution vulnerability exists in the TIFF fillinraster function of the igcore19d.dll library of Accusoft ImageGear 19.4, 19.5 and... Read more ➔
CVE-2020-11869 (v3: 3.3) 27 Apr 2020
An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in... Read more ➔
CVE-2020-12135 (v3: 5.5) 24 Apr 2020
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() para... Read more ➔
CVE-2019-20788 (v3: 9.8) 23 Apr 2020
libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or wid... Read more ➔
CVE-2020-11939 (v3: 9.8) 23 Apr 2020
In nDPI through 3.2 Stable, the SSH protocol dissector has multiple KEXINIT integer overflows that result in a controlled remote heap overflow in conc... Read more ➔
CVE-2020-11945 (v3: 9.8) 23 Apr 2020
An issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest Authentication nonce to gain access to resources that are... Read more ➔
CVE-2019-9183 (v3: 7.5) 23 Apr 2020
An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. A buffer overflow is present due to an integer underflow during 6LoWPAN fra... Read more ➔