CVE-2018-19665

MEDIUM Year: 2018
CVSS v3 Score
5.7
Medium
CVSS v2 Score
2.7
Low
Weakness Type
CWE-190
View all →

Vulnerability Description

The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.

Related Vulnerabilities

CVE-2020-27350

MEDIUM
CVSS:5.7(Medium)

APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfil...

CWE-1902020

CVE-2021-3398

MEDIUM
CVSS:5.8(Medium)

Stormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component.

CWE-1902021

CVE-2011-4097

MEDIUM
CVSS:5.5(Medium)

Integer overflow in the oom_badness function in mm/oom_kill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cause a denial of service (memory consumption or process termin...

CWE-1902011

CVE-2012-0038

MEDIUM
CVSS:5.5(Medium)

Integer overflow in the xfs_acl_from_disk function in fs/xfs/xfs_acl.c in the Linux kernel before 3.1.9 allows local users to cause a denial of service (panic) via a filesystem with a malformed ACL, l...

CWE-1902012

CVE-2015-1526

MEDIUM
CVSS:5.5(Medium)

The media_server component in Android allows remote attackers to cause a denial of service via a crafted application.

CWE-1902015

CVE-2015-4645

MEDIUM
CVSS:5.5(Medium)

Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial of service (application crash) via a crafted input, which tri...

CWE-1902015