The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves an operation that goes beyond buffer boundaries into memory, allowing attackers to execute arbitrary code.

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude lies in the execution of operations beyond the buffer boundaries in memory when processing media files. Exploiting this vulnerability allows a malicious actor to execute arbitrar...

The vulnerability of the Adobe Photoshop graphic editor arises from the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

CVE-2021-21863

A unsafe deserialization vulnerability exists in the ComponentModel Profile.FromFile functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability...

Vulnerability Spotlight: Use-after-free vulnerability in tinyobjloader

Lilith of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered that a specific function of tinyobjloader does not properly validate array indexes. An adversary could trick a user into opening a specially crafted file, causing an index... This is only the...

CVE-2020-22352

The gfdashsegmenterprobeinput function in GPAC v0.8 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2020-22352

GPAC vulnerability CVE-2020-22352 affects gf_dash_segmenter_probe_input in GPAC v0.8, where a crafted MP4Box file can trigger a NULL pointer dereference, causing a denial of service. This is documented across multiple connected records (e.g., NVD entry and CNVD/Red Hat entries) confirming the und...

CVE-2020-22352

The gfdashsegmenterprobeinput function in GPAC v0.8 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

DEBIAN-CVE-2020-24826

A vulnerability in the elf::section::asstrtab function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted ELF file...

CVE-2020-24821

A vulnerability in the dwarf::cursor::skipform function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted ELF file...

UBUNTU-CVE-2020-24822

A vulnerability in the dwarf::cursor::uleb function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted ELF file...

CVE-2020-19303

An arbitrary file upload vulnerability in /fileupload.php of hdcms 5.7 allows attackers to execute arbitrary code via a crafted file...

CVE-2020-19303

An arbitrary file upload vulnerability in /fileupload.php of hdcms 5.7 allows attackers to execute arbitrary code via a crafted file...

DEBIAN-CVE-2021-30577

Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...

CVE-2021-30577

Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...

CVE-2021-30577

Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...

Privilege escalation

Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...

CVE-2021-30577

Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...

UBUNTU-CVE-2021-30577

Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...

CVE-2021-30577

Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...

CVE-2021-30577

Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...