CVE-2018-9354

MEDIUM Year: 2018
CVSS v3 Score
6.5
Medium
Weakness Type
CWE-369
View all →

Vulnerability Description

In VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide by 0. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.

Related Vulnerabilities

CVE-2014-8130

MEDIUM
CVSS:6.5(Medium)

The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a craft...

CWE-3692014

CVE-2015-7513

MEDIUM
CVSS:6.5(Medium)

arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service (divide-by-zero error and hos...

CWE-3692015

CVE-2015-8504

MEDIUM
CVSS:6.5(Medium)

Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.

CWE-3692015

CVE-2016-10506

MEDIUM
CVSS:6.5(Medium)

Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (applica...

CWE-3692016

CVE-2016-3622

MEDIUM
CVSS:6.5(Medium)

The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image.

CWE-3692016

CVE-2016-7530

MEDIUM
CVSS:6.5(Medium)

The quantum handling code in ImageMagick allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds write) via a crafted file.

CWE-3692016