Corel PhotoPaint Standard 2020 缓冲区错误漏洞

Corel PhotoPaint Standard 2020 is a commercial photo editing and pixel-based design program for Corel from Corel Digital Technology Corel Canada. A buffer error vulnerability in CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 can be exploited by an unauthenticated attacker to execute...

The vulnerability of the bpf_ringbuf_reserve() function in the Linux operating system, related to writing beyond the buffer boundaries in memory, allows a attacker to execute arbitrary code in the kernel context.

The vulnerability of the bpfringbufreserve function in the Linux operating system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the kernel context...

grub2: Heap out-of-bounds write in short form option parser

A flaw was found in grub2. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The highest threat from this vulnerability is to data confidentiality and integrity as well as syste...

Apple tvOS 缓冲区错误漏洞

Apple tvOS is a set of smart TV operating systems from Apple USA. A buffer error vulnerability exists in Apple TV 4K and Apple TV HD, which stems from a boundary error when processing font files in FontParser. The vulnerability can be exploited to trick a victim into opening a specially crafted...

Tianocore Edk2 缓冲区错误漏洞

Tianocore Edk2 is a cross-platform firmware development environment from the Tianocore community that follows the UEFI and PI specifications. A buffer error vulnerability exists in TianoCore edk2 that stems from a boundary error in the IScsiHexToBin function in NetworkPkg/IScsiDxe. A remote...

SAMSUNG Mobile devices 缓冲区错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A buffer error vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Sep-2021 Release 1, which stems from the presence of an improper input validation in the...

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2017/Adobe Acrobat Reader 2017 arises due to an operation that goes beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 arises due to an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a malicious...

Delta Electronics DIAEnergie 缓冲区错误漏洞

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. A securi...

Apple macOS 缓冲区错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A buffer error vulnerability exists in Apple macOS, which can result in arbitrary code execution due to the handling of maliciously crafted images. The following products and versions are affected: iPhone 6s...

Apple iOS 和 iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS and iPadOS, which can be exploited by malicious applications to execute...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A security vulnerability exists in Apple macOS Big Sur 11.6 that allows malicious applications to bypass Gatekeeper checks...

Apple tvOS 缓冲区错误漏洞

Apple tvOS is a set of smart TV operating systems from the U.S. company Apple Apple. A buffer error vulnerability exists in several Apple products, which could allow an attacker to cause arbitrary code execution via a maliciously written PDF. The vulnerability is fixed in the following products a...

Apple macOS 缓冲区错误漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A buffer error vulnerability exists in Apple macOS Monterey versions prior to 12.1, which stems from an out-of-bounds read and could lead to the execution of arbitrary code...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app by Apple, Inc. A security vulnerability exists in Apple macOS Big Sur. A malicious application may be able to execute arbitrary code with kernel privileges...

QEMU 缓冲区错误漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. A buffer error vulnerability exists in QEMU UAS, which stems from the product failing to check the number provided by the visitor resulting in...

GPAC Project Advanced Content 缓冲区错误漏洞

GPAC is an open source multimedia framework. A buffer error vulnerability exists in GPAC Project Advanced Content, which stems from the product's MPEG-4 failure to check the correctness of additive operations. An attacker could exploit the vulnerability to cause memory corruption...

Google TensorFlow 缓冲区错误漏洞

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A security vulnerability exists in Google TensorFlow, which could be exploited by an attacker to bind a reference to a null pointer in all operations of type tf.rawops.MatrixSetDiagV to cause undefined...

Qt QLibrary 缓冲区错误漏洞

Qt QLibrary is a code framework and QLibrary is one of his libraries. A buffer error vulnerability exists in Qt QLibrary that stems from an out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPaintEngineEx::stroke...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a buffer error vulnerability that stems from incorrect instruction reordering during JIT optimization...

Netgear NETGEAR 缓冲区错误漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in Netgear NETGEAR that originates from an out-of-bounds read/write to certain NETGEAR devices...