CVE Vulnerability Catalog

The SDK in Bento4 version 1.5.0-616 has a Read Memory Access Violation vulnerability in the AP4_StszAtom class. This vulnerability can be exploited by opening a crafted .MP4 file.

In the SDK in Bento4 version 1.5.0-616, there is a memory access violation vulnerability in the AP4_StssAtom class. This vulnerability can be exploited to execute arbitrary code by opening a crafted .MP4 file.

The SDK in Bento4 version 1.5.0-616 has a memory access violation vulnerability in the AP4_StscAtom class. This vulnerability can be exploited to execute arbitrary code by opening a crafted .MP4 file.

The SDK in Bento4 version 1.5.0-616 has a Write Memory Access Violation vulnerability in the SetItemCount function in the Core/Ap4StscAtom.h file. This vulnerability can be exploited to execute arbitrary code by opening a crafted .MP4 file.

The SDK in Bento4 version 1.5.0-616 has a Read Memory Access Violation vulnerability in the AP4_AtomSampleTable::GetSample function. This vulnerability can be exploited by opening a crafted .MP4 file.

Unrestricted File Upload vulnerability in the fileDenyPattern in TYPO3 from versions 7.6.0 to 7.6.21 and from 8.0.0 to 8.7.4 allows remote authenticated users to upload files with a .pht extension, consequently executing arbitrary PHP code.

There is a sensitive information disclosure vulnerability in document.php in Dolibarr ERP/CRM version 6.0.0 via the file parameter.

There is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13, which may lead to a remote denial of service attack.

In MongoDB libbson version 1.7.0, the bson_iter_codewscope function miscalculates a length argument in bson_utf8_validate, allowing remote attackers to cause a denial of service.

In WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1, iterators are mishandled, allowing remote attackers to cause a denial of service through heap-based buffer over-read in the WPXTableList class. This vulnerability can be triggered in LibreOffice before version 5.3.7.

The av_color_primaries_name function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, leading to a NULL pointer dereference in the avcodec_string function in libavcodec/utils.c.

A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file.

An Incorrect Default Permissions issue was discovered in AzeoTech DAQFactory versions prior to 17.1. Local, non-administrative users may be able to replace or modify original application files with malicious ones.

An elevation of privilege vulnerability in the MediaTek mmc driver. Affects Android, including the Android kernel.

CVE-2017-0803 is a privilege escalation vulnerability in the MediaTek accessory detector driver affecting the Android kernel.

An elevation of privilege vulnerability in the MediaTek kernel. Affects Android and its kernel.

CVE-2017-0801 is a privilege escalation vulnerability in the MediaTek libmtkomxvdec library in Android. It affects the Android kernel.

CVE-2017-0800 is a privilege escalation vulnerability in the MediaTek teei module in the Android kernel. This issue affects various versions of the Android kernel.

CVE-2017-0799 is an elevation of privilege vulnerability in the MediaTek lastbus in the Android kernel. The issue affects Android kernel versions and may allow unauthorized access to system resources.

An elevation of privilege vulnerability in the MediaTek kernel. It affects Android, potentially allowing attackers to gain higher privileges in the system.