CVE-2022-24353

TP-Link AC1750 router (v1.1.4 Build 20211022 rel.59103(5553)) is affected by a NetUSB.ko buffer over-read that allows network-adjacent attackers to execute code with root privileges. This is due to insufficient validation of user-supplied data. Affected component: NetUSB.ko; impact includes remot...

CVE-2022-23123

Netatalk vulnerability CVE-2022-23123 (and related CVEs) affects AFP service where getdirparams improperly validates user data, causing an out-of-bounds read that can enable remote code execution as root. No authentication is required. Public advisories identify the issue and link it to ZDI-15830...

CVE-2022-23124

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getfinderinfo method. The issue results from the lack of proper validation of...

CVE-2022-23122

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setfilparams function. The issue results from the lack of proper validation of the length o...

CVE-2022-24353

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 1.1.4 Build 20211022 rel.591035553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB.ko module. The issue...

CVE-2022-23124

Netatalk is affected by CVE-2022-23124 (out-of-bounds read) and related CVEs, enabling unauthenticated information disclosure and potential code execution in some contexts. Public advisories reference multiple Netatalk CVEs (including CVE-2022-23124 and others) with impact descriptions such as in...

CVE-2022-1230

Samsung Galaxy S21 devices with software versions prior to 4.5.40.5 are affected by a local-privilege escalation vulnerability in the handling of redirections (loadUrl). An attacker who can execute low-privileged code on the target can force a redirect to a malicious site, and, in combination wit...

CVE-2022-23121

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parseentries function. The issue results from the lack of proper error handling when parsin...

CVE-2022-23125

Netatalk CVE-2022-23125 is a remote, unauthenticated code execution flaw in the copyapplfile function where len validation for user data can overflow a fixed-size stack buffer. Affected product: Netatalk (AFP) 3.1.x. Root context: multiple sources confirm root-level impact and disclosure of this ...

CVE-2022-23122

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setfilparams function. The issue results from the lack of proper validation of the length o...

CVE-2022-23121

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parseentries function. The issue results from the lack of proper error handling when parsin...

CVE-2022-23122

CVE-2022-23122 affects Netatalk, with the flaw in setfilparams allowing an unauthenticated attacker to trigger a stack-based buffer overflow and execute code as root. This is a remote code execution with high impact on confidentiality, integrity, and availability. The issue stems from insufficien...

CVE-2022-24907

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2023-26349 ZDI-CAN-20218: Adobe Dimension USDZ File Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Dimension versions 3.4.7 and earlier is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must...

CVE-2022-23124

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getfinderinfo method. The issue results from the lack of proper validation of...

CVE-2022-24673

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the SLP protocol. The issue results from...

CVE-2022-24908

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2023-25881 ZDI-CAN-19390: Adobe Dimension OBJ File Improper Input Validation Remote Code Execution

Adobe Dimension versions 3.4.7 and earlier is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2022-23124

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getfinderinfo method. The issue results from the lack of proper validation of...

CVE-2022-23121

CVE-2022-23121 is a Netatalk remote code execution vulnerability (root context) caused by improper error handling in AppleDouble parsing in parse_entries. The issue is part of multiple Netatalk flaws (e.g., CVE-2022-23122, CVE-2022-23123, CVE-2022-23124, CVE-2022-23125) affecting 3.1.x releases; ...