Memory corruption

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Memory corruption

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Heap overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-31502

OpenText Brava! Desktop (Build 16.6.4.55) is affected by a PDF file parsing use-after-free/invalid object validation vulnerability. The issue arises from not validating the existence of an object before performing operations during PDF parsing, enabling arbitrary code execution when a user visits...

CVE-2021-31501

OpenText Brava! Desktop 16.6.3.84 is affected by a DWG file parsing vulnerability caused by missing validation, leading to an out-of-bounds read that can disclose sensitive data. It requires user interaction (malicious page/file); in combination with other vulnerabilities, it could enable arbitra...

CVE-2021-31500

CVE-2021-31500 affects OpenText Brava! Desktop 16.6.3.84. The vulnerability lies in the DWF file parsing code, where insufficient validation of a user-supplied value leads to an untrusted pointer dereference. This can allow remote code execution in the context of the current process when a user o...

CVE-2021-31499

OpenText Brava! Desktop 16.6.3.84 is affected by an out-of-bounds write in DWF file parsing. The root cause is missing validation of user-supplied data during DWF parsing, which can cause a write past the end of an allocated buffer and allow remote code execution in the context of the current pro...

CVE-2021-31498

OpenText Brava! Desktop 16.6.3.84 is affected by a DWF file parsing flaw that allows information disclosure via an out-of-bounds read, caused by inadequate validation of user-supplied data and capable of being triggered when a user opens a malicious DWF-containing page/file. The issue can lead to...

CVE-2021-31498

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-31497

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31497

OpenText Brava! Desktop 16.6.3.84 is affected by CVE-2021-31497 through a DWG file parsing flaw. The vulnerability arises from failure to validate the existence of an object before operations, enabling arbitrary code execution in the process context. User interaction is required (visiting a malic...

CVE-2021-31496

OpenText Brava! Desktop 16.6.3.84 is affected by a DXF file parsing vulnerability that allows remote code execution. The issue stems from improper validation during DXF parsing, causing a write past the end of an allocated buffer (out-of-bounds write). Exploitation requires user interaction (visi...

CVE-2021-31495

OpenText Brava! Desktop 16.6.3.84 is affected by a memory corruption flaw in DXF file parsing that allows code execution after user interaction (malicious page or file). The root cause is improper validation of user-supplied data in the DXF parser. Exploitation requires user interaction; no patch...