190 matches found
Astra Linux – Vulnerability in SOX
There is a heap-based buffer overflow vulnerability in the sphere.c startread function of the Sound Exchange libsox 14.4.2 version and the main commit 42b3557e. A specially crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to exploit this vulnerability...
Linux Distros Unpatched Vulnerability : CVE-2026-19025
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - H5Olayoutdecode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's stored chunk-layout dimensionality matches its dataspace rank wh...
EUVD-2026-33100
Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...
The vulnerability of the search function in the text editor Notepad++ allows a perpetrator to gain unauthorized access to protected information and cause service failure.
The vulnerability of the search function in the Notepad++ text editor is related to deficiencies in the formatting string processing mechanism. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information and cause service failures through a specially...
The vulnerability of the Vim text editor, related to the lack of measures to neutralize special elements, allows a hacker to execute arbitrary commands.
The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows an attacker to execute arbitrary commands, provided that the user opens a specially crafted file...
CVE-2026-6364
Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file. Chromium security severity: Medium...
PT-2026-33164
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.101 Description An out of bounds read in Skia allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted file. An out of bounds read occurs when a...
Linux Distros Unpatched Vulnerability : CVE-2026-24660
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow vulnerability exists in the x3floadhuffman functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a...
CVE-2026-35176
CVE-2026-35176 concerns openFPGALoader (1.1.1 and earlier) with a heap-buffer-overflow in POFParser::parseSection() while parsing crafted .pof files. The issue allows out-of-bounds heap memory access and does not require FPGA hardware to trigger. Impact per data shows high severity in confidentia...
CVE-2025-64735
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information...
The vulnerability of the professional video editing software Adobe Premiere Pro, related to reading data beyond the allowed range in memory, allows a hacker to execute arbitrary code.
The vulnerability of the professional video editing software Adobe Premiere Pro lies in the ability to read data beyond the acceptable range in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...
EUVD-2026-9291
A heap-based buffer overflow vulnerability exists in the Nicolet WFT parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch db9a9a63. A specially crafted .wft file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...
The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to pointer assignment errors, allows a hacker to cause a service failure.
The vulnerability of the 3D model texturing program Adobe Substance 3D Designer is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure, provided that the user opens a specially crafted file...
PT-2026-7423
Name of the Vulnerable Software and Affected Versions Substance3D - Stager versions 3.1.6 and earlier Description The software contains a flaw that allows for writing data outside the intended memory boundaries. Successful exploitation of this issue could lead to arbitrary code execution with the...
CVE-2026-1284
An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file...
CVE-2021-33361
Memory leak in the afraboxread function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...
The vulnerability of the Apache OpenOffice office software package, related to the lack of authentication, allows attackers to circumvent existing security restrictions.
The vulnerability of the Apache OpenOffice office software is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created file...
PT-2025-46444
Name of the Vulnerable Software and Affected Versions InCopy versions 20.5, 19.5.5 and earlier Description InCopy versions 20.5, 19.5.5 and earlier are susceptible to a Use After Free issue, potentially allowing arbitrary code execution with the privileges of the current user. Successful...
EUVD-2025-34474
Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...