UBUNTU-CVE-2022-40156

REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2021-40156

creationtimestamp| type| source ---|---|--- 2021-09-15 20:22:12+00:00| seen| https://t.me/cibsecurity/28924...

CVE-2021-40156

CVE-2021-40156 affects Autodesk Navisworks 2019–2022. The issue is a buffer overflow/out-of-bounds write when parsing malicious DWG files, forcing writes beyond allocated boundaries and enabling arbitrary code execution. Some sources describe remote code execution requiring user interaction (e.g....

CVE-2022-40156

...

CVE-2022-40156

CVE-2022-40156 is an XStream denial of service vulnerability (stack-based buffer overflow) reported across IBM and related IBM Cloud Pak for Data/Knowledge Catalog/Transformation Advisor contexts. Connected documents confirm the issue arises from parsing XML data with XStream and that remediation...