CVE-2023-47384

MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gfisomaddchapter at /isomedia/isomwrite.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

PT-2023-7368

Name of the Vulnerable Software and Affected Versions Adobe After Effects versions 24.0.2 and earlier Adobe After Effects versions 23.6 and earlier Description The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an...

GPAC Security Vulnerabilities

GPAC is an open source multimedia framework. GPAC suffers from a security vulnerability that stems from the presence of a memory leak vulnerability that allows an attacker to cause a denial of service DoS via a crafted MP4 file...

GNU Binutils Development Environment Buffer Overflow DoS

The vulnerability of the bfdpefscanstartaddress function in the bfd/pef.c component of the GNU Binutils development environment is related to pointer overwriting errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

GNU Binutils section.c Buffer Overflow DoS

The vulnerability of the bfdmakesectionwithflags function in the section.c component of the GNU Binutils development environment is related to pointer manipulation errors. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...

GNU Binutils Development Environment Heap Buffer Overflow DoS

The vulnerability of the cplus-dem.c component of the GNU Binutils development environment is related to the allocation of unlimited memory. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created file...

GNU Binutils Component Heap Buffer Overflow DoS

The vulnerability of the functions nextistypequal and cplusdemangletype in the cp-demangle.c component of the GNU Binutils development environment involves executing a loop with an unreachable exit condition. Exploiting this vulnerability allows an attacker to trigger a service failure using a...

GNU Binutils read_section function Heap Buffer Overflow DoS

The vulnerability of the readsection function in the dwarf2.c component of the GNU Binutils development environment relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created ELF file...

Vim Heap Buffer Overflow DoS

The vulnerability of the vimiswordpbuf function in the Vim text editor is related to the execution of operations beyond the buffer’s memory limits. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and even cause service interruptions through ...

Vim diff_write_buffer DoS

The vulnerability of the diffwritebuffer function in the Vim text editor is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created file...

PT-2023-6948 · Microsoft · Windows User Interface Application Core +1

Name of the Vulnerable Software and Affected Versions: Windows User Interface Application Core affected versions not specified Description: The issue is related to insufficient input validation in the Windows User Interface Application Core, which can be exploited by attackers to execute arbitrar...

PT-2023-7369 · Adobe · After Effects

Name of the Vulnerable Software and Affected Versions: Adobe After Effects versions 24.0.2 and earlier Adobe After Effects versions 23.6 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of a...

GNU Binutils Dwarf2 C Buffer Overflow DoS

The vulnerability of the decodelineinfo function in the dwarf2.c component of the GNU Binutils development environment is related to reading data beyond the allowable buffer limits. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created ELF...

PT-2023-7134 · Adobe · Audition

Name of the Vulnerable Software and Affected Versions: Adobe Audition versions 24.0 and earlier Adobe Audition versions 23.6.1 and earlier Description: The issue is related to an Access of Uninitialized Pointer, which could result in arbitrary code execution in the context of the current user...

LibRaw Process Canon Camera Info Confidential Data Compromise

The vulnerability of the processCanonCameraInfo function in the LibRaw image processing library is related to the output of operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity,...

PT-2023-7133

Name of the Vulnerable Software and Affected Versions Adobe Audition versions 24.0 and earlier Adobe Audition versions 23.6.1 and earlier Description The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated...

PT-2023-7264

Name of the Vulnerable Software and Affected Versions Adobe Premiere Pro versions 24.0 and earlier Adobe Premiere Pro versions 23.6 and earlier Description The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an...

GNU Binutils Dwarf Processdebug_info DoS

The vulnerability of the processdebuginfo function in the dwarf.c component of the GNU Binutils development environment is related to incorrect calculation of buffer size. Exploiting this vulnerability allows an attacker who operates remotely to trigger a service failure using a specially created...

GNU Binutils read_formatted_entries Heap Buffer Overflow DoS

The vulnerability of the readformattedentries function in the dwarf2.c component of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure through the use of a specially created ELF file...

GNU Binutils Development Environment DoS

The vulnerability of the /bfd/pef.c component of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure through the use of a specially created file...