CWE:

	Topic	Date	Author
High	Google SketchUp lib3ds 3DS Importer Memory Corruption	18.01.2010	CORE

---

CVEMAP Search Results

CVE

Details

Description

2019-09-11

Medium

CVE-2019-13544

Vendor: Deltaww Software: Tpeditor

Delta Electronics TPEditor, Versions 1.94 and prior. Multiple out-of-bounds write vulnerabilities may be exploited by processing specially crafted project files, which may allow remote code execution.

2019-09-09

High

CVE-2019-16139

Vendor: Compact arena project Software: Compact arena

An issue was discovered in the compact_arena crate before 0.4.0 for Rust. Generativity is mishandled, leading to an out-of-bounds write or read.

2019-09-07

Medium

CVE-2019-16093

Vendor: Symonics Software: Libmysofa

Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

2019-09-06

Medium	CVE-2019-9248	Vendor: Google Software: Android	In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Medium	CVE-2019-9270	Vendor: Google Software: Android	In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Medium	CVE-2019-9274	Vendor: Google Software: Android	In the Android kernel in the mnh driver there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Medium	CVE-2019-9426	Vendor: Google Software: Android	In the Android kernel in Bluetooth there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Medium	CVE-2019-9441	Vendor: Google Software: Android	In the Android kernel in the mnh driver there is a possible out of bounds write due to improper input validation. This could lead to escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Medium	CVE-2019-9443	Vendor: Google Software: Android	In the Android kernel in the vl53L0 driver there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation of privilege due to a set_fs() call without restoring the previous limit with System execution privileges needed. User interaction is not needed for exploitation.
Medium	CVE-2019-9446	Vendor: Google Software: Android	In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to improper input validation. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

 

---

Copyright 2019, cxsecurity.com