CVE & Exploit Intelligence Database

CVE-2018-17233 6.5 MEDIUM 1 Writeup EPSS 0.00

A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.

CWE-369 Sep 20, 2018

CVE-2018-14423 7.5 HIGH EPSS 0.02

Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).

CWE-369 Jul 19, 2018

CVE-2018-14395 6.5 MEDIUM 1 Writeup EPSS 0.01

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted audio file when converting to the MOV audio format.

CWE-369 Jul 19, 2018

CVE-2018-14394 6.5 MEDIUM 1 Writeup EPSS 0.00

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted Waveform audio file.

CWE-369 Jul 19, 2018

CVE-2018-13785 6.5 MEDIUM 1 Writeup EPSS 0.03

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.

CWE-190 Jul 09, 2018

CVE-2017-16890 5.5 MEDIUM EPSS 0.00

SWFTools 0.9.2 has a divide-by-zero error in the wav_convert2mono function in lib/wav.c because the align value may be zero.

CWE-369 Jul 09, 2018

CVE-2018-13100 5.5 MEDIUM EPSS 0.00

An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3, which does not properly validate secs_per_zone in a corrupted f2fs image, as demonstrated by a divide-by-zero error.

CWE-369 Jul 03, 2018

CVE-2018-13097 5.5 MEDIUM EPSS 0.00

An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3. There is an out-of-bounds read or a divide-by-zero error for an incorrect user_block_count in a corrupted f2fs image, leading to a denial of service (BUG).

CWE-125 Jul 03, 2018

CVE-2018-1152 6.5 MEDIUM 1 Writeup EPSS 0.01

libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image.

CWE-369 Jun 18, 2018

CVE-2018-11212 6.5 MEDIUM 2 Writeups EPSS 0.02

An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.

CWE-369 May 16, 2018

CVE-2018-11207 6.5 MEDIUM 2 Writeups EPSS 0.00

A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.

CWE-369 May 16, 2018

CVE-2018-11203 6.5 MEDIUM 1 Writeup EPSS 0.01

A division by zero was discovered in H5D__btree_decode_key in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.

CWE-369 May 16, 2018

CVE-2018-10016 5.5 MEDIUM EPSS 0.00

Netwide Assembler (NASM) 2.14rc0 has a division-by-zero vulnerability in the expr5 function in asm/eval.c via a malformed input file.

CWE-369 Apr 11, 2018

CVE-2018-9304 6.5 MEDIUM 1 Writeup EPSS 0.00

In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service.

CWE-369 Apr 04, 2018

CVE-2018-9018 6.5 MEDIUM EPSS 0.01

In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file.

CWE-369 Mar 25, 2018

CVE-2014-8130 6.5 MEDIUM EPSS 0.02

The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither.

CWE-369 Mar 12, 2018

CVE-2017-18207 6.5 MEDIUM EPSS 0.01

The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications "need to be prepared to handle a wide variety of exceptions.

CWE-369 Mar 01, 2018

CVE-2018-2385 6.5 MEDIUM EPSS 0.00

Under certain conditions a malicious user provoking a divide by zero crash can prevent legitimate users from accessing the SAP Internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, and its services.

CWE-369 Feb 14, 2018

CVE-2017-1000414 7.5 HIGH 1 Writeup EPSS 0.00

ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode handling resulting denial of service.

CWE-369 Jan 25, 2018

CVE-2017-17508 6.5 MEDIUM 1 Writeup EPSS 0.00

In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.

CWE-369 Dec 11, 2017