CVE-2021-44422

An Improper Input Validation Vulnerability exists when reading a BMP file using Open Design Alliance Drawings SDK before 2022.12. Crafted data in a BMP file can trigger a write operation past the end of an allocated buffer, or lead to a heap-based buffer overflow. An attacker can leverage this...

CVE-2021-44422

CVE-2021-44422 concerns Open Design Alliance Drawings SDK/Drawings Explorer. The vulnerability arises from improper input validation during BMP parsing: lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. This can trigger a write past the end ...

PT-2021-24088

Name of the Vulnerable Software and Affected Versions: Open Design Alliance ODA Drawings Explorer versions prior to 2022.12 Description: An out-of-bounds read issue exists when reading a BMP file using Open Design Alliance ODA Drawings Explorer. The specific issue occurs after loading BMP files,...

PT-2021-24087

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.12 Description: An Improper Input Validation issue exists when reading a BMP file, allowing crafted data to trigger a write operation past the end of an allocated buffer or lead to a...

CVE-2021-44422: Improper Input Validation

An Improper Input Validation Vulnerability exists when reading a BMP file using Open Design Alliance Drawings SDK before 2022.12. Crafted data in a BMP file can trigger a write operation past the end of an allocated buffer, or lead to a heap-based buffer overflow. An attacker can leverage this...

Open Design Alliance (ODA) Drawings Explorer BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

Open Design Alliance (ODA) Drawings Explorer BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

Open Design Alliance (ODA) Drawings Explorer BMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...

CVE-2021-44423: Out-of-bounds Read

An out-of-bounds read vulnerability exists when reading a BMP file using Open Design Alliance ODA Drawings Explorer before 2022.12. The specific issue exists after loading BMP files. Unchecked input data from a crafted BMP file leads to an out-of-bounds read. An attacker can leverage this...

Siemens Syngo FastView Out-of-Bounds Writing Vulnerability (CNVD-2022-56511)

Siemens Syngo FastView is a standalone viewer of Dicom 2 images available on Dicom exchange media from Siemens, Germany. An out-of-bounds write vulnerability exists in Siemens Syngo FastView, which stems from a lack of proper validation of user-supplied data when parsing BMP files. An attacker...

USN-5202-1: OpenJDK vulnerabilities

Varnavas Papaioannou discovered that the FTP client implementation in OpenJDK accepted alternate server IP addresses when connecting with FTP passive mode. An attacker controlling an FTP server that an application connects to could possibly use this to expose sensitive information rudimentary por...

Bentley View BMP File Parsing Heap Buffer Overflow Remote Code Execution Vulnerability

A security vulnerability exists in Bentley View, a free viewer from Bentley Systems, U.S.A. The Bentley View BMP file parsing vulnerability is due to a failure to properly validate the length of user-supplied data before copying it to a heap buffer. An attacker could exploit this vulnerability to...

Bentley View Buffer Overflow Vulnerability (CNVD-2021-102038)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View caused by incorrect boundary checking when parsing BMP files, which could be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system...

Bentley View BMP File Parsing Heap Buffer Overflow Remote Code Execution Vulnerability (CNVD-2021-102036)

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View BMP file parsing heap buffer overflow remote code execution vulnerability is due to a failure to properly validate the length of user-supplied data before copying it to the heap buffer. An attacker could exploit this...

CVE-2021-32024

A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process...

CVE-2021-32024

A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process...

Remote code execution

A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process...

CVE-2021-32024

A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process...

CVE-2021-32024

CVE-2021-32024 describes a remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4–7.1. The affected component is the BMP image codec; the underlying issue enables an attacker to potentially execute code within the context of the vulnerable process. Documente...

PT-2021-19635

Name of the Vulnerable Software and Affected Versions: BlackBerry QNX SDP versions 6.4 to 7.1 Description: A remote code execution issue in the BMP image codec could allow an attacker to potentially execute code in the context of the affected process. Recommendations: For versions 6.4 to 7.1,...