kernel: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap

A denial-of-service vulnerability has been identified in the Linux kernel, stemming from an out-of-bounds overflow. This flaw occurs when the requested memory mapping region size exceeds the allocated region size. An attacker can exploit this by crafting a specially designed file, which, when...

CVE-2025-5042

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of Adobe Illustrator’s graphic editor lies in its numerical loss of significance, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to a countable loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to writing beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Adobe Substance 3D Viewer application, which allows for the viewing and editing of 3D files, stems from a pointer manipulation issue. This vulnerability allows an attacker to trigger a service failure.

The vulnerability of the Adobe Substance 3D Viewer application for viewing and editing 3D files is related to the handling of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted malicious file...

The vulnerability of the UMI CMS content management system, related to the lack of measures taken to protect the website structure, allows attackers to intercept the administrator’s session.

The vulnerability of the UMI CMS content management system is related to the lack of measures taken to protect the website’s structure. Operating the system may allow a malicious actor, operating remotely, to intercept the administrator’s session by performing XSS attacks using a specially crafte...

PT-2026-45416

Name of the Vulnerable Software and Affected Versions GPAC Project/MP4Box versions prior to 26.02.0 Description A NULL pointer dereference exists in the gf ac4 pres b 4 back channels present function within the /media tools/av parsers.c file. This issue allows an attacker to cause a Denial of...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious file...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious file...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious file...

Adobe Substance 3D Viewer Heap Buffer Overflow Vulnerability

Adobe Substance 3D Viewer is a standalone desktop application from Adobe for viewing and editing 3D files and seamlessly integrates with applications such as Photoshop to support non-destructive 2D/3D co-creation. Adobe Substance 3D Viewer suffers from a heap buffer overflow vulnerability that...

Adobe InDesign Desktop Buffer Overflow Vulnerability

Adobe InDesign Desktop is desktop publishing software developed by Adobe, mainly used for the typography of print and digital publications, including books, magazines, newspapers, posters, e-books and so on. Adobe InDesign Desktop suffers from a buffer overflow vulnerability that originates from...

Adobe InDesign Desktop Digital Error Vulnerability

Adobe InDesign Desktop is desktop publishing software developed by Adobe, mainly used for the typography of print and digital publications, including books, magazines, newspapers, posters, e-books and so on. Adobe InDesign Desktop suffers from a numeric error vulnerability that stems from imprope...

The vulnerability of Adobe Illustrator, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

PT-2026-45415

Name of the Vulnerable Software and Affected Versions GPAC Project/MP4Box versions prior to 26.02.0 Description A NULL pointer dereference exists in the gf odf ac4 cfg dsi v1 function within the /odf/descriptors.c file. This issue allows an attacker to cause a Denial of Service DoS, which is a...

The vulnerability of Adobe Illustrator, related to writing beyond the buffer boundaries, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of Adobe Illustrator’s graphic editor, related to reading data beyond the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena lies in insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code using a specially created DOE file...

The vulnerability of Adobe Illustrator, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...