CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
libarchiveOSS-FuzzHeap-buffer-overflow in circular_memcpyNo scorelibavcOSS-FuzzHeap-use-after-free in ih264_inter_pred_luma_horz_hpel_vert_qpel_ssse3No scoreopenthreadOSS-FuzzUNKNOWN READ in ot::TimerScheduler::RemoveNo scoreopenscOSS-FuzzUNKNOWN READ in bebytes2ushortNo scorewiresharkOSS-FuzzUNKNOWN READ in fuzzshark_ip_proto-udpNo scorelibhevcOSS-FuzzStack-use-after-return in ihevcd_process_threadNo scorelibspngOSS-FuzzHeap-use-after-free in read_chunks_after_idatNo scoreradare2OSS-FuzzHeap-buffer-overflow in r_read_le32No scorelibhtpOSS-FuzzUse-of-uninitialized-value in LzmaDec_TryDummyNo scoreopenthreadOSS-FuzzUNKNOWN READ in ot::Ip6::NetifUnicastAddress::GetNextNo scoreopenthreadOSS-FuzzStack-buffer-overflow in ot::MeshCoP::Commissioner::GeneratePskcNo scoreopen62541OSS-FuzzHeap-buffer-overflow in searchObjectForKeyRecNo scorelibspngOSS-FuzzUNKNOWN READ in validate_past_idatNo scorelibsassOSS-FuzzHeap-buffer-overflow in std::__1::vector<std::__1::vector<Sass::SharedImpl<Sass::ComplexSelector>, std::No scoreharfbuzzOSS-FuzzHeap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned shortNo scoreyaraOSS-FuzzIndex-out-of-bounds in yara_yyparseNo scorelibspngOSS-FuzzHeap-buffer-overflow in spng_decode_imageNo scoreopenthreadOSS-FuzzStack-use-after-return in ot::MeshCoP::ChannelMaskEntryBase::GetChannelPageNo scorendpiOSS-FuzzUNKNOWN READ in ndpi_search_kerberosNo scorelwanOSS-FuzzHeap-buffer-overflow in post_process_templateNo scorelwanOSS-FuzzGlobal-buffer-overflow in lex_multiline_stringNo scoreopenthreadOSS-FuzzStack-buffer-overflow in ot::NetworkData::PrefixTlv::InitNo scorelwanOSS-FuzzGlobal-buffer-overflow in template_fuzzer.ccNo scorewget2OSS-FuzzHeap-buffer-overflow in _iri_unescape_inlineNo scorereadstatOSS-FuzzHeap-buffer-overflow in sas_read8No scoreyaraOSS-FuzzUNKNOWN READ in dotnet_parse_tilde_2No scorereadstatOSS-FuzzHeap-buffer-overflow in sas_read8No scoregdalOSS-FuzzStack-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<chNo scorelibaomOSS-FuzzHeap-buffer-overflow in av1_convolve_2d_copy_sr_sse2No scoremrubyOSS-FuzzUse-of-uninitialized-value in ht_copyNo scorelwanOSS-FuzzNegative-size-param in parse_proxy_protocol_v2No scorelibaomOSS-FuzzUse-of-uninitialized-value in inv_txfm2d_add_facadeNo scoreradare2OSS-FuzzHeap-buffer-overflow in r_core_lines_initcacheNo scoreradare2OSS-FuzzHeap-buffer-overflow in r_str_utf8_codepointNo scorelibgit2OSS-FuzzHeap-buffer-overflow in git_buf_decode_base85No score- google chromeUse after free in ANGLE in Google Chrome prior to 83.0.4103.97 allowed a remote attacker to...9.6 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8096au firmware +16 more +18 morePossible out of bounds read due to a missing bounds check and could lead to local information...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +45 more +47 morePossible out of bound access while processing assoc response from host due to improper length...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 moreOut of bound write while QoS DSCP mapping due to improper input validation for data received from...9.8 Critical
- mozilla firefox, opensuse leap +1 moreMozilla developers and community members reported memory safety bugs present in Firefox 77. Some...8.8 High
- mozilla firefoxDue to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read...6.5 Medium
- mozilla firefox, opensuse leap +1 moreWhen constructing a permission prompt for WebRTC, a URI was supplied from the content process....6.5 Medium
- mozilla firefox, opensuse leap +1 moreIn non-standard configurations, a JPEG image created by JavaScript could have caused an internal...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreWhen processing callbacks that occurred during window flushing in the parent process, the...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 High
- mozilla firefox, opensuse leap +1 moreA VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster:...8.8 High
- Show moreLoading…