AprilTag buffer error vulnerability

AprilTag is a robot vision benchmark system open sourced by AprilRobotics. Versions of AprilTag 3.4.5 and earlier contain a buffer error vulnerability. This vulnerability stems from memory corruption in the apriltagdetectordetect function, which may lead to information leakage or code execution...

Janet buffer error vulnerability

Janet is a functional and imperative programming language and bytecode interpreter developed by Janet Language. Versions of Janet prior to 1.40.1 contained a buffer error vulnerability, which was caused by an out-of-bounds read in the function janetcpopfuncdef, potentially leading to information...

Sumatrapdf buffer error vulnerability

sumatrapdf is an open-source PDF reader developed by sumatrapdfreader. Versions of sumatrapdf 3.5.2 and earlier have a buffer error vulnerability. This vulnerability stems from heap out-of-bound reading in the MOBI HuffDic decompressor, which may lead to crashes...

Janet buffer error vulnerability

Janet is a functional and imperative programming language and bytecode interpreter developed by Janet Language. Versions of Janet prior to 1.40.1 contained a buffer error vulnerability, which was caused by an out-of-bounds read in the osstrftime function, potentially leading to information leakag...

Janet buffer error vulnerability

Janet is a functional and imperative programming language and bytecode interpreter developed by Janet Language. Versions of janet-lang prior to 1.40.1 contain a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in the function janetcif, which may lead to information...

Finalwire AIDA64 buffer error vulnerability

Finalwire AIDA64 is a system information, diagnosis, and auditing tool developed by the Hungarian company Finalwire, running on the Microsoft Windows platform. Version 5.50.2100 of Finalwire AIDA64 contains a buffer error vulnerability, which stems from improper handling of the file opening...

o6 Automation Open62541 Buffer Error Vulnerability

o6 Automation Open62541 is an industrial automation toolset developed by the German company o6 Automation. o6 Automation Open62541 contains a buffer error vulnerability; this vulnerability arises from specially crafted JSON messages that may cause the decoder to write data beyond the allocated he...

Autodesk 3ds Max buffer error vulnerability

Autodesk 3ds Max is a full-featured 3D computer graphics software developed by Autodesk, Inc. Autodesk 3ds Max has a buffer error vulnerability, which stems from out-of-bounds writing during the parsing of specially crafted GIF files, potentially allowing for the execution of arbitrary code...

Autodesk 3ds Max buffer error vulnerability

Autodesk 3ds Max is a full-featured 3D computer graphics software developed by Autodesk, Inc. Autodesk 3ds Max has a buffer error vulnerability, which stems from out-of-bounds write operations during the loading or import of specific USD files. This vulnerability may allow for the execution of...

iccDEV buffer error vulnerability

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.3 contained a buffer error vulnerability. This vulnerability stemmed from improper array boundary validation during the processing of ICC configuration file...

TCPFLOW buffer error vulnerability

TCPFLOW is a TCP/IP packet demuxer developed by Simson L. Garfinkel. Versions of TCPFLOW 1.61 and earlier contained a buffer error vulnerability. This vulnerability stemmed from the use of wifipcap to perform length checks on error fields when processing TIM elements, which could lead to...

Glib buffer error vulnerability

Glib is a generic, portable utility library for the GNOME project. It provides many useful data types, macros, type conversions, string utilities, file utilities, and abstraction for main loops. Glib has a buffer error vulnerability, which stems from integer overflows in the implementation of...

GPAC buffer error vulnerability

GPAC is an open-source multimedia framework developed by GPAC. Versions of GPAC prior to 2.4.0 contained a buffer error vulnerability, which stemmed from out-of-bounds writing in the SRT subtitle import component...

Everest-Core buffer error vulnerability

Everest-core is a major component of the EVerest open-source electric vehicle charging software stack. Versions of everest-core prior to 2025.12.0 contained a buffer error vulnerability. This vulnerability stems from the ismessagecrccorrect function in the DZGGSH01 power meter SLIP parser, which...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003774)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003774 advisory. In nfcllcpbuildsdreqtlv of llcpcommands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wi...

VideoLAN VLC Media Player buffer error vulnerability

VideoLAN VLC Media Player is a free, open-source cross-platform multimedia player developed by the French company VideoLAN. It is also a multimedia framework. This product supports playback of various media types such as files and discs and various audio/video formats such as WMV and MP3. Version...

Celestial AbsoluteTelnet Buffer Error Vulnerability

Celestial AbsoluteTelnet is a Telnet/SSH terminal client software developed by the American company Celestial. Version 11.24 of Celestial AbsoluteTelnet contains a buffer error vulnerability. This vulnerability stems from manipulating the DialUp connection and license name fields, which could all...

Cmder buffer error vulnerability

Cmder is an open-source cmd command-line software developed by Cmder. Version 1.3.18 of Cmder contains a buffer error vulnerability, which stems from improper handling of a specially crafted cmd file. This vulnerability may lead to a denial-of-service attack...

Celestial AbsoluteTelnet Buffer Error Vulnerability

Celestial AbsoluteTelnet is a Telnet/SSH terminal client software developed by the American company Celestial. Version 11.24 of Celestial AbsoluteTelnet contains a buffer error vulnerability. This vulnerability stems from manipulating the username and error report fields, which could allow local...

Wireshark buffer error vulnerability

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A buffer error vulnerability exists in Wireshark versions 4.6.0 through 4.6.2 and 4.4.0 through...