rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-14127 
Possible buffer overflow while playing mkv clip due to lack of validation of atom size buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Problem types: description: Buffer Copy Without Checking Size of Input in Video
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Published: 2020-04-16T10:46:18.000Z
CVE-2019-14130 
Memory corruption can occurs in trusted application if offset size from HLOS is more than actual mapped buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130
Problem types: description: Use of Out-of-range Pointer Offset Issue in Content Protection
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Published: 2020-07-30T11:40:30.000Z
CVE-2019-14131 
Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MSM8998, Nicobar, QCA6574AU, QCS605, Rennell, SA6155P, Saipan, SC8180X, SDM660, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
Problem types: description: Improper Validation of Array Index in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
Published: 2020-04-16T10:46:18.000Z
CVE-2019-14132 
Buffer over-write when this 0-byte buffer is typecasted to some other structure and hence memory corruption in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in QCS605, SA6155P, SM8150
Problem types: description: Reachable Assertion in Video
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile
Published: 2020-04-16T10:46:19.000Z
CVE-2019-14134 
Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected value of country IE in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, QCA8081, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130
Problem types: description: Buffer Over-read Issue in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Published: 2020-04-16T10:46:19.000Z
CVE-2019-14135 
Possible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4010, QCA6174A, QCA6574AU, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS405, QCS605, SA6155P, Saipan, SDA845, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130
Problem types: description: Buffer Copy Without Checking Size of Input in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Published: 2020-04-16T10:46:20.000Z
CVE-2019-14192 
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-31T12:18:53.000Z
CVE-2019-14193 
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the "if" block after calculating the new path length.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-31T12:35:18.000Z
CVE-2019-14194 
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-31T12:22:19.000Z
CVE-2019-14195 
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the "else" block after calculating the new path length.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-31T12:23:58.000Z
CVE-2019-14196 
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-31T12:30:00.000Z
CVE-2019-14197 
An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-31T12:28:53.000Z
CVE-2019-14198 
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-31T12:27:36.000Z
CVE-2019-14199 
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-31T12:31:09.000Z
CVE-2019-14200 
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-31T12:14:51.000Z
CVE-2019-14201 
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-31T12:13:49.000Z
CVE-2019-14202 
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-31T12:12:54.000Z
CVE-2019-14203 
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-31T12:11:47.000Z
CVE-2019-14204 
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-31T12:09:44.000Z
CVE-2019-14205 
A Local File Inclusion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to retrieve arbitrary files via the $REQUEST['adaptive-images-settings']['source_file'] parameter in adaptive-images-script.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-21T17:18:32.000Z
CVE-2019-14206 
An Arbitrary File Deletion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to delete arbitrary files via the $REQUEST['adaptive-images-settings'] parameter in adaptive-images-script.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-21T17:18:52.000Z
CVE-2019-14207 
An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling the clone function due to an endless loop resulting from confusing relationships between a child and parent object (caused by an append error).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-21T18:17:18.000Z
CVE-2019-14208 
An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a NULL pointer dereference and crash when getting a PDF object from a document, or parsing a certain portfolio that contains a null dictionary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-21T18:17:29.000Z
CVE-2019-14209 
An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to Heap Corruption due to data desynchrony when adding AcroForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-21T18:17:37.000Z
CVE-2019-14210 
An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to Memory Corruption due to the use of an invalid pointer copy, resulting from a destructed string object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-21T18:17:44.000Z
CVE-2019-14211 
An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash due to the lack of proper validation of the existence of an object prior to performing operations on that object when executing JavaScript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-21T18:17:55.000Z
CVE-2019-14212 
An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling certain XFA JavaScript due to the use of, or access to, a NULL pointer without proper validation on the object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-21T18:18:03.000Z
CVE-2019-14213 
An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash due to the repeated release of the signature dictionary during CSG_SignatureF and CPDF_Document destruction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-21T18:18:10.000Z
CVE-2019-14214 
An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a JavaScript Denial of Service when deleting pages in a document that contains only one page by calling a "t.hidden = true" function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-21T18:18:17.000Z
CVE-2019-14215 
An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling xfa.event.rest XFA JavaScript due to accessing a wild pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-21T18:18:25.000Z
CVE-2019-14216 
An issue was discovered in the svg-vector-icon-plugin (aka WP SVG Icons) plugin through 3.2.1 for WordPress. wp-admin/admin.php?page=wp-svg-icons-custom-set mishandles Custom Icon uploads. CSRF leads to upload of a ZIP archive containing a .php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T20:03:03.000Z
CVE-2019-14220 
An issue was discovered in BlueStacks 4.110 and below on macOS and on 4.120 and below on Windows. BlueStacks employs Android running in a virtual machine (VM) to enable Android apps to run on Windows or MacOS. Bug is in a local arbitrary file read through a system service call. The impacted method runs with System admin privilege and if given the file name as parameter returns you the content of file. A malicious app using the affected method can then read the content of any system file which it is not authorized to read
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-24T20:15:58.000Z
CVE-2019-14221 
1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T12:34:21.000Z
CVE-2019-14222 
An issue was discovered in Alfresco Community Edition versions 6.0 and lower. An unauthenticated, remote attacker could authenticate to Alfresco's Solr Web Admin Interface. The vulnerability is due to the presence of a default private key that is present in all default installations. An attacker could exploit this vulnerability by using the extracted private key and bundling it into a PKCS12. A successful exploit could allow the attacker to gain information about the target system (e.g., OS type, system file locations, Java version, Solr version, etc.) as well as the ability to launch further attacks by leveraging the access to Alfresco's Solr Web Admin Interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T21:13:08.000Z
CVE-2019-14223 
An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable to an Open Redirect attack via a crafted POST request. By manipulating the POST parameters, an attacker can redirect a victim to a malicious website over any protocol the attacker desires (e.g.,http, https, ftp, smb, etc.).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-06T16:04:29.000Z
CVE-2019-14224 
An issue was discovered in Alfresco Community Edition 5.2 201707. By leveraging multiple components in the Alfresco Software applications, an exploit chain was observed that allows an attacker to achieve remote code execution on the victim machine. The attacker must upload malicious Solr configuration files and then receive a JMX connection from the victim, and serve a Java object that results in deserialization and code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T21:01:19.000Z
CVE-2019-14225 
OX App Suite 7.10.1 and 7.10.2 allows SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T16:34:44.000Z
CVE-2019-14226 
OX App Suite through 7.10.2 has Insecure Permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T16:29:01.000Z
CVE-2019-14227 
OX App Suite 7.10.1 and 7.10.2 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-14T16:17:17.000Z
CVE-2019-14228 
Xavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the username parameter when registering a new user at admin/includes/adminprocess.php. If there is an error when registering the user, the unsanitized username will reflect via the error page. Due to the lack of CSRF protection on the admin/includes/adminprocess.php endpoint, an attacker is able to chain the XSS with CSRF in order to cause remote exploitation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-26T12:35:46.000Z
CVE-2019-14230 
An issue was discovered in the Viral Quiz Maker - OnionBuzz plugin before 1.2.7 for WordPress. One could exploit the id parameter in the set_count ajax nopriv handler due to there being no sanitization prior to use in a SQL query in saveQuestionVote. This allows an unauthenticated/unprivileged user to perform a SQL injection attack capable of remote code execution and information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-21T22:38:57.000Z
CVE-2019-14231 
An issue was discovered in the Viral Quiz Maker - OnionBuzz plugin before 1.2.2 for WordPress. One could exploit the points parameter in the ob_get_results ajax nopriv handler due to there being no sanitization prior to use in a SQL query in getResultByPointsTrivia. This allows an unauthenticated/unprivileged user to perform a SQL injection attack capable of remote code execution and information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-21T22:39:08.000Z
CVE-2019-14232 
An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If django.utils.text.Truncator's chars() and words() methods were passed the html=True argument, they were extremely slow to evaluate certain inputs due to a catastrophic backtracking vulnerability in a regular expression. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which were thus vulnerable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T00:00:00.000Z
CVE-2019-14233 
An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Due to the behaviour of the underlying HTMLParser, django.utils.html.strip_tags would be extremely slow to evaluate certain inputs containing large sequences of nested incomplete HTML entities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T14:31:09.000Z
CVE-2019-14234 
An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Due to an error in shallow key transformation, key and index lookups for django.contrib.postgres.fields.JSONField, and key lookups for django.contrib.postgres.fields.HStoreField, were subject to SQL injection. This could, for example, be exploited via crafted use of "OR 1=1" in a key or index name to return all records, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to the QuerySet.filter() function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T12:16:44.000Z
CVE-2019-14235 
An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uri_to_iri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T14:34:22.000Z
CVE-2019-14236 
On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated by observing CPU registers and the effect of code/instruction execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-12T17:43:11.000Z
CVE-2019-14237 
On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls (FAC) (a software IP protection method for execute-only access) can be defeated by observing CPU registers and the effect of code/instruction execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-12T17:56:44.000Z
CVE-2019-14238 
On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated with a debug probe via the Instruction Tightly Coupled Memory (ITCM) bus.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-24T18:00:20.000Z
CVE-2019-14239 
On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls (FAC) (a software IP protection method for execute-only access) can be defeated by leveraging a load instruction inside the execute-only region to expose the protected code into a CPU register.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-24T18:14:47.000Z
CVE-2019-14240 
WCMS v0.3.2 has a CSRF vulnerability, with resultant directory traversal, to modify index.html via the /wex/html.php?finish=../index.html URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-23T11:51:14.000Z
CVE-2019-14241 
HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in proto_htx.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-23T12:02:36.000Z
CVE-2019-14242 
An issue was discovered in Bitdefender products for Windows (Bitdefender Endpoint Security Tool versions prior to 6.6.8.115; and Bitdefender Antivirus Plus, Bitdefender Internet Security, and Bitdefender Total Security versions prior to 23.0.24.120) that can lead to local code injection. A local attacker with administrator privileges can create a malicious DLL file in %SystemRoot%\System32\ that will be executed with local user privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-30T17:47:59.000Z
CVE-2019-14243 
headerv2.go in mastercactapus proxyprotocol before 0.0.2, as used in the mastercactapus caddy-proxyprotocol plugin through 0.0.2 for Caddy, allows remote attackers to cause a denial of service (webserver panic and daemon crash) via a crafted HAProxy PROXY v2 request with truncated source/destination address data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-23T21:38:14.000Z
CVE-2019-14245 
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete databases (such as oauthv2) from the server via an attacker account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T18:41:25.000Z
CVE-2019-14246 
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to discover phpMyAdmin passwords (of any user in /etc/passwd) via an attacker account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T18:38:44.000Z
CVE-2019-14247 
The scan() function in mad.c in mpg321 0.3.2 allows remote attackers to trigger an out-of-bounds write via a zero bitrate in an MP3 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-24T03:29:47.000Z
CVE-2019-14248 
In libnasm.a in Netwide Assembler (NASM) 2.14.xx, asm/pragma.c allows a NULL pointer dereference in process_pragma, search_pragma_list, and nasm_set_limit when "%pragma limit" is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-24T03:30:01.000Z
CVE-2019-14249 
dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF file with a zero-size section group (SHT_GROUP), as demonstrated by dwarfdump.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-24T03:30:18.000Z
CVE-2019-14250 
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-24T03:30:30.000Z