AZL-13391 CVE-2023-0804 affecting package libtiff for versions less than 4.4.0-8

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127...

PT-2023-1541 · Delta Electronics · Dopsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics DOPSoft versions 4.00.16.22 and prior Description: The issue is related to an out-of-bounds write in the DOPSoft software, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced ...

The vulnerability of the 3D Builder software for designing and preparing objects for 3D printing lies in insufficient validation of input data, allowing a hacker to execute arbitrary code.

The vulnerability of the 3D Builder software for designing and preparing objects for 3D printing is related to insufficient verification of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

CVE-2022-47040

An issue in ASKEY router RTF3505VW-N1 BRSVg000R3505VMN1001s327 allows attackers to escalate privileges via running the tcpdump command after placing a crafted file in the /tmp directory and sending crafted packets through port 80...

CVE-2022-41145

CVE-2022-41145 affects Tracker Software PDF-XChange Editor. The flaw is in parsing U3D files and can trigger a read past the end of an allocated buffer, enabling information disclosure and, in conjunction with other vulnerabilities, arbitrary code execution in the target process. Exploitation req...

CVE-2023-0416

GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file...

PT-2023-19589 · Jenkins · Jenkins Semantic Versioning Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Semantic Versioning Plugin versions 1.14 and earlier Description: The issue allows attackers who can control agent processes to have Jenkins parse a crafted file, potentially leading to the extraction of secrets from the Jenkins...

libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c

An out-of-bound read flaw was found in LibTIFF, in extractImageSection in the tools/tiffcrop.c:6905, allowing attackers to cause a denial of service via a crafted tiff file...

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial Of Service. The vulnerability is due to a segmentation fault in the gfsmloadinitswf function of swfparse.c file, which allows an attacker to send crafted files into the system causing an application crash...

CVE-2022-31901

Buffer overflow in function Notepadplus::addHotSpot in Notepad++ v8.4.3 and earlier allows attackers to crash the application via two crafted files...

Buffer overflow

Buffer overflow in function Notepadplus::addHotSpot in Notepad++ v8.4.3 and earlier allows attackers to crash the application via two crafted files...

CVE-2022-31901

Buffer overflow in function Notepadplus::addHotSpot in Notepad++ v8.4.3 and earlier allows attackers to crash the application via two crafted files...

CVE-2022-31901

Buffer overflow in function Notepadplus::addHotSpot in Notepad++ v8.4.3 and earlier allows attackers to crash the application via two crafted files...

CVE-2022-31901

Buffer overflow in function Notepadplus::addHotSpot in Notepad++ v8.4.3 and earlier allows attackers to crash the application via two crafted files...

Notepad++ 缓冲区错误漏洞

Notepad++ is an open source plain text editor by Don Ho, an individual developer in Taiwan, China. A security vulnerability exists in Notepad++ v8.4.3 and earlier versions, which stems from a buffer overflow in the Notepadplus::addHotSpot function in Notepad++ v8.4.3 and earlier versions that...

PT-2023-13056 · Notepad++ · Notepad++

Name of the Vulnerable Software and Affected Versions: Notepad++ versions 8.4.3 and earlier Description: The issue is a buffer overflow in the Notepad plus::addHotSpot function, which allows attackers to crash the application by using two crafted files. This can be exploited to cause a denial of...

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe. Adobe Dimension handles files with a buffer overflow vulnerability, which can be exploited by remote attackers to submit special file requests and trick users into parsing them, which can capture sensitive memory information...

Vulnerability of SNC_io parser<EW>: read_vertex(); vh->sfaces_last(); component Nef_S2/SNC_io parser.h library of computational geometry algorithms CGAL, allowing a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of SNCioparser is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file. This vulnerability is associated with the...

CVE-2022-42268

Omniverse Kit contains a vulnerability in the reference applications Create, Audio2Face, Isaac Sim, View, Code, and Machinima. These applications allow executable Python code to be embedded in Universal Scene Description USD files to customize all aspects of a scene. If a user opens a USD file th...

libtiff: tiffcrop.c has uint32_t underflow which leads to out of bounds read and write in extractContigSamples8bits()

A flaw was found in libtiff's tiffcrop tool that has a uint32t underflow, which leads to an out-of-bounds read and write in the extractContigSamples8bits routine. This flaw allows an attacker who supplies a crafted file to tiffcrop to trick a user into opening the crafted file with tiffcrop,...