Vulnerabilities (CVE)

Filtered by CWE-674
Total 246 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-9617 1 Wireshark 1 Wireshark 2019-10-03 4.3 MEDIUM 5.5 MEDIUM
In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion (uncontrolled recursion) in the dissect_daap_one_tag function in epan/dissectors/packet-daap.c in the DAAP dissector.
CVE-2018-11254 1 Podofo Project 1 Podofo 2019-10-03 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree::GetPageNode() function of PdfPagesTree.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file, a related issue to CVE-2017-8054.
CVE-2017-11556 1 Libsass 1 Libsass 2019-10-03 5.0 MEDIUM 7.5 HIGH
There is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser.cpp in LibSass 3.4.5. A crafted input may lead to remote denial of service.
CVE-2017-14861 1 Exiv2 1 Exiv2 2019-10-03 4.3 MEDIUM 5.5 MEDIUM
There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack.
CVE-2017-0692 1 Google 1 Android 2019-10-03 4.3 MEDIUM 5.5 MEDIUM
A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36725407.
CVE-2018-11597 1 Espruino 1 Espruino 2019-10-03 4.3 MEDIUM 5.5 MEDIUM
Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsing because of a missing check for stack exhaustion with many '{' characters in jsparse.c.