CVE-2026-21322: Out-of-bounds Read

After Effects versions 25.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CVE-2025-70347

The mquickjs JavaScript library (developed by Bellard) contains a vulnerability in versions prior to commit 74b7e (2026-01-15) . A local attacker can trigger a denial of service (DoS) by providing a crafted file to the get_mblock_size function located at mquickjs.c . No specific exploit details o...

Siemens Simcenter Femap和Siemens Simcenter Nastran 缓冲区错误漏洞

Siemens Simcenter Femap and Siemens Simcenter Nastran are both products of German company Siemens. Siemens Simcenter Femap is a cutting-edge engineering simulation application designed for creating, editing, and importing/reusing finite element analysis models for complex products or systems...

PT-2026-7423

Name of the Vulnerable Software and Affected Versions Substance3D - Stager versions 3.1.6 and earlier Description The software contains a flaw that allows for writing data outside the intended memory boundaries. Successful exploitation of this issue could lead to arbitrary code execution with the...

PT-2026-7422

Name of the Vulnerable Software and Affected Versions Substance3D - Stager versions 3.1.6 and earlier Description An out-of-bounds write issue exists in Substance3D - Stager. Successful exploitation of this issue could lead to arbitrary code execution with the privileges of the current user. User...

PT-2026-7426

Name of the Vulnerable Software and Affected Versions Bridge versions 15.1.3 and 16.0.1 and earlier Description The software contains an out-of-bounds write issue that may allow for arbitrary code execution with the privileges of the current user. A user must open a specially crafted file to...

CVE-2026-21325: Out-of-bounds Read

After Effects versions 25.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

PT-2026-7376

Name of the Vulnerable Software and Affected Versions Adobe After Effects versions 25.6 and earlier Description Adobe After Effects is affected by an out-of-bounds read issue when processing a specially crafted file. Successful exploitation of this issue could allow an attacker to execute code wi...

CVE-2026-21345: Out-of-bounds Read

Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current...

CVE-2024-54192

An issue inTcpreplay v4.5.1 allows a local attacker to cause a denial of service via a crafted file to the tcpeditdltgetplugin function at src/tcpedit/plugins/dltutils.c...

CVE-2026-25920 SumatraPDF has a heap out-of-bounds read in MOBI HuffDic decompressor

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, a heap out-of-bounds read vulnerability exists in SumatraPDF's MOBI HuffDic decompressor. The bounds check in AddCdicData only validates half the range that DecodeOne actually accesses. Opening a crafted .mobi file can read...

fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow

A flaw was found in FontForge. A remote attacker could exploit a heap-based buffer overflow vulnerability during SFD file parsing. This issue arises from insufficient validation of user-supplied data length before copying it to a buffer. Successful exploitation requires user interaction, such as...

fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing

A flaw was found in FontForge. This use-after-free vulnerability, occurring during the parsing of SFD Spline Font Database files, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a specially crafted malicious file or visiting a...

Super-Linter 命令注入漏洞

Super-Linter is a code checker developed by Super Linter. Versions 6.0.0 to 8.3.0 of Super-Linter have a command injection vulnerability, which stems from improper handling of specially crafted file names. This vulnerability may lead to command injection attacks...

The vulnerability of the WriteMPCImage() function in the coders/mpc.c component of the console image editing tool ImageMagick allows a hacker to cause a service failure.

The vulnerability of the WriteMPCImage function in the coders/mpc.c component of the console-based ImageMagick graphics editor is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability of the lite_font_map() function in the coders/wmf.c component of the ImageMagick console graphics editor allows a hacker to cause a service failure.

The vulnerability of the litefontmap function in the coders/wmf.c component of the ImageMagick console graphics editor is related to the failure to release resources after the expiration of their useful period. Exploiting this vulnerability could allow a malicious actor to cause service...

PT-2026-33807

Name of the Vulnerable Software and Affected Versions DeepCool DeepCreative versions prior to 1.2.7 Description Insecure permissions for a critical resource allow a local attacker to execute arbitrary code via a crafted file. Recommendations Update to a version newer than 1.2.7...

EUVD-2020-30999

GoldWave 5.70 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting malicious input in the File Open URL dialog. Attackers can generate a specially crafted text file with Unicode-encoded shellcode to trigger a stack-based overflow and execute command...

CVE-2020-37050 Quick Player 1.3 - '.m3l' Buffer Overflow

Quick Player 1.3 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a malicious .m3l file with carefully constructed payload. Attackers can trigger the vulnerability by loading a specially crafted file through the application's file loading...

CVE-2020-37029

FTPDummy 4.80 contains a local buffer overflow vulnerability in its preference file handling that allows attackers to execute arbitrary code. Attackers can craft a malicious preference file with carefully constructed shellcode to trigger a structured exception handler overwrite and execute system...