Vulnerabilities (CVE)

Filtered by CWE-770
Total 784 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-0725 1 Google 1 Android 2019-10-03 4.3 MEDIUM 5.5 MEDIUM
A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-37627194.
CVE-2018-5783 1 Podofo Project 1 Podofo 2019-10-03 4.3 MEDIUM 5.5 MEDIUM
In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file.
CVE-2017-8779 3 Libtirpc Project, Ntirpc Project, Rpcbind Project 3 Libtirpc, Ntirpc, Rpcbind 2019-10-03 7.8 HIGH 7.5 HIGH
rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.
CVE-2019-9291 1 Google 1 Android 2019-10-01 6.8 MEDIUM 8.8 HIGH
In Bluetooth, there is a possible remote code execution due to an improper memory allocation. This could lead to remote code execution in Bluetooth with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112159179