4318 matches found
CVE-2024-56452
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-56451
Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-56456
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-56456
The connected sources describe a vulnerability in the 3D engine module where input parameters used during glTF model loading are not verified. This affects the loading process and is said to potentially impact availability. The sources do not specify affected versions, vendor names, exploit detai...
CVE-2024-56455
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-56454
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-56454
CVE-2024-56454 affects Huawei HarmonyOS, specifically the glTF model loader in the 3D engine module. The root cause is a failure to properly verify input parameters during glTF model loading, which can lead to an availability impact if exploited. The CVSS v3.1 vector indicates a local attack with...
CVE-2024-56453
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-56453
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-56453
The CVE concerns the 3D engine module’s glTF model loader, where input parameters are not verified during loading. The connected PT-2025-3297 entry confirms the issue affects the 3D engine module and that the vulnerability can impact availability if exploited. The available documentation does not...
CVE-2024-56452
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-56452
The CVE-2024-56452 issue concerns the 3D engine module’s glTF model loading where input parameters are not verified. The vulnerability affects the loading path of glTF models via the 3D engine module and is described as impacting availability. The PT-2025-3296 entry confirms the affected componen...
CVE-2024-56452
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-56451
Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-56451
Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...
The vulnerability of the Adobe Substance 3D Modeler software lies in its ability to read data beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Adobe Substance 3D Modeler software-related to reading beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially crafted file...
The vulnerability of the Substance 3D Painter software for creating textures and materials for 3D models arises from a buffer overflow in its dynamic memory. This allows attackers to execute arbitrary code within the context of the current user.
The vulnerability of the Substance 3D Painter software for creating textures and materials for 3D models arises due to an overflow in the dynamic memory buffer. Exploiting this vulnerability allows a hacker to execute arbitrary code in the context of the current user, using a specially created fi...
The vulnerability of the Substance 3D Painter software, used for creating textures and materials for 3D models, relates to reading beyond the buffer boundary. This allows attackers to execute arbitrary code.
The vulnerability of the Substance 3D Painter software for creating textures and materials for 3D models involves reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
3D Avatar User Profile <= 1.0.0 - Reflected Cross-Site Scripting
Description The 3D Avatar User Profile plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...
CVE-2024-47810
A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs ...