>> ARCHIVE: 2016-01

The iOS kernel suffers from a use-after-free vulnerability in AppleOscarAccelerometer.

Wireshark suffers from an out-of-bounds read in Hiqnet_display_data.

The _ool variations of the IOKit device.defs functions all incorrectly deal with error conditions. If you run the mig tool on device.defs you can see the source of the kernel-side…

Kleefa version 1.7 suffers from cross site scripting and remote SQL injection vulnerabilities.

Wireshark suffers from a heap-based out-of-bounds read in Nettrace_3gpp_32_423_file_open.

The iOS kernel suffers from a use-after-free vulnerability in AppleOscarCompass.

Opening userclient type 12 of IOSCSIPeripheralDeviceType00 leads to an exploitable kernel NULL dereference.

This proof of concept demonstrates the Android Libstagefright heap buffer overflow that occurs due to an integer overflow in MP3 ID3 tag parsing.

Secure Item Hub version 1.0 suffers from input validation, code execution, and remote file upload vulnerabilities.

Pdfium suffers from a heap-based out-of-bounds read in Opj_j2k_read_mcc (libopenjpeg).