CVE-2022-34244

Adobe Photoshop is affected by an Access of Uninitialized Pointer vulnerability (CVE-2022-34244) in versions 22.5.7 and earlier, and 23.3.2 and earlier, with potential disclosure of memory and bypass of ASLR. Exploitation requires user interaction (open a malicious file). A fix is available: upda...

CVE-2022-34239

CVE-2022-34239 affects Adobe Acrobat Reader and related products; the issue is an out-of-bounds read in font parsing that could disclose memory. Versions affected include Acrobat Reader DC/Classic lines (e.g., 22.001.20142 and earlier; 20.005.30334 and earlier; 17.012.30229 and earlier), with exp...

CVE-2022-34239 Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Acrobat Reader versions 22.001.20142 and earlier, 20.005.30334 and earlier and 17.012.30229 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

CVE-2022-34233

Summary: CVE-2022-34233 is a Use-After-Free flaw in Adobe Acrobat Reader versions up to 22.001.20142 (and earlier), 20.005.30334 (and earlier), and 17.012.30229 (and earlier). The issue can disclose memory and bypass ASLR, with exploitation requiring user interaction (open a malicious file). Conn...

CVE-2022-34233 Adobe Acrobat Reader DC Doc print Use-After-Free Information Disclosure Vulnerability

Adobe Acrobat Reader versions 22.001.20142 and earlier, 20.005.30334 and earlier and 17.012.30229 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

CVE-2022-34236

CVE-2022-34236 is an information-disclosure vulnerability in Adobe Acrobat Reader DC/Continuous, caused by a font-parsing out-of-bounds read that could leak memory. Affected are various versions (Reader/DC continuous and prior releases) with exploitation requiring user interaction to open a malic...

CVE-2022-34236 Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Acrobat Reader versions 22.001.20142 and earlier, 20.005.30334 and earlier and 17.012.30229 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

CVE-2022-34237

CVE-2022-34237 affects Adobe Acrobat Reader DC/Acrobat Reader versions such as 22.001.20142 (and earlier), 20.005.30334 (and earlier), and 17.012.30229 (and earlier). Root cause: Use-After-Free in a component handling memory, leading to potential disclosure of sensitive memory and bypass of ASLR....

CVE-2022-34237 Adobe Acrobat Reader DC Font Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Acrobat Reader versions 22.001.20142 and earlier, 20.005.30334 and earlier and 17.012.30229 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

CVE-2022-34232

Summary of CVE-2022-34232 (Adobe Acrobat/Reader Use-After-Free): Affects Adobe Acrobat Reader versions 22.001.20142 and earlier, 20.005.30334 and earlier, and 17.012.30229 and earlier. Root cause is a Use-After-Free condition in the PDF processing path that can lead to disclosure of sensitive mem...

CVE-2022-34232 Adobe Acrobat Reader DC Annotation print Use-After-Free Information Disclosure Vulnerability

Adobe Acrobat Reader versions 22.001.20142 and earlier, 20.005.30334 and earlier and 17.012.30229 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

CVE-2022-34234 Adobe Acrobat Reader DC Doc printWithParams Use-After-Free Information Disclosure Vulnerability

Adobe Acrobat Reader versions 22.001.20142 and earlier, 20.005.30334 and earlier and 17.012.30229 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

CVE-2022-34234

CVE-2022-34234 affects Adobe Acrobat Reader DC/Classic versions prior to the listed fixed releases (e.g., 22.001.20142 and earlier 20.005.30334 and 17.012.30229 families) with a Use-After-Free vulnerability that can lead to disclosure of memory and bypass mitigation like ASLR. Root cause: use-aft...

Adobe Photoshop 22.x < 22.5.8 / 23.x < 23.4.1 Multiple Vulnerabilities (macOS APSB22-35)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 22.5.8/23.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-35 advisory. - Adobe Photoshop versions 22.5.7 and earlier and 23.3.2 and earlier are affected by a Use After...

Adobe Photoshop 22.x < 22.5.8 / 23.x < 23.4.1 Multiple Vulnerabilities (APSB22-35)

The version of Adobe Photoshop installed on the remote Windows host is prior to 22.5.8/23.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-35 advisory. - Adobe Photoshop versions 22.5.7 and earlier and 23.3.2 and earlier are affected by a Use After Free...

Global overflow in pppdump leads to RCE

Global overflow vulnerability in pppdump A global overflow vulnerability is present in the pppdump utility of the ppp repo which may lead to code execution. Specifically when the -p flag is given for enabling the pppmodeon the pppdump command, a malicious crafted pppdump file can trigger a global...

Updated exempi packages fix security vulnerability

XMP Toolkit SDK versions 2020.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

abomonation transmutes &T to and from &[u8] without sufficient constraints

This transmute is at the core of the abomonation crates. It's so easy to use it to violate alignment requirements that no test in the crate's test suite passes under miri. The use of this transmute in serialization/deserialization also incorrectly assumes that the layout of a reprRust type is...

CVE-2022-30669

Adobe Illustrator versions 26.0.2 and earlier and 25.4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2022-30666

Adobe Illustrator versions 26.0.2 and earlier and 25.4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...