2546 matches found
CVE-2022-38431
Adobe Photoshop versions 22.5.8 and earlier and 23.4.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the...
CVE-2022-38429
Adobe Photoshop versions 22.5.8 and earlier and 23.4.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the...
CVE-2022-38430
Adobe Photoshop versions 22.5.8 and earlier and 23.4.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the...
Ansys SpaceClaim 缓冲区错误漏洞
Ansys SpaceClaim is a solid modeling CAD software from Ansys Corporation. A buffer error vulnerability exists in Ansys SpaceClaim 2022 R1, which stems from the parsing of XB files without proper validation of user-supplied data could result in writes beyond the end of the allocated data structure...
Bento4 安全漏洞
Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 v1.6.0-639, which originates from a denial of service due to a buffer overflow in the AP4MemoryByteStream::WritePartial function of its mp42aac component that can be caused by an...
The vulnerability of the tiffWriter function in the gd_tiff.c component of the LibGD graphics library allows a perpetrator to access confidential data and also trigger a service failure.
The vulnerability of the tiffWriter function in the gdtiff.c component of the LibGD graphics library is related to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service failures...
PT-2022-5209 · Adobe · Photoshop
Name of the Vulnerable Software and Affected Versions: Adobe Photoshop versions 22.5.8 and earlier Adobe Photoshop versions 23.4.2 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an...
PT-2022-5062 · Adobe · Bridge
Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.2 and earlier Adobe Bridge versions 11.1.3 and earlier Description: The issue is related to an out-of-bounds read in memory when parsing a crafted file, which could result in reading past the end of an allocated...
PT-2022-5217 · Adobe · Animate
Name of the Vulnerable Software and Affected Versions: Adobe Animate versions 21.0.11 and earlier Adobe Animate versions 22.0.7 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocat...
PT-2022-5213 · Adobe · Indesign
Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 16.4.2 and earlier Adobe InDesign versions 17.3 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocate...
PT-2022-5215 · Adobe · Indesign
Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 16.4.2 and earlier Adobe InDesign versions 17.3 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocate...
PT-2022-5060 · Adobe · Bridge
Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.2 and earlier Adobe Bridge versions 11.1.3 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Bridge when parsing a crafted file, which could result in a read past the end ...
PT-2022-22007 · Micro Star International · Msi Feature Navigator
Name of the Vulnerable Software and Affected Versions: MSI Feature Nagivator version 1.0.1808.0901 Description: The issue in the Feature Navigator of Micro-Star International MSI Feature Nagivator allows attackers to cause a Denial of Service DoS via a crafted image or video file. Recommendations...
The vulnerability of the GATT Generic Attribute Profile implementation in the Bluetooth protocol stack for the Linux BlueZ operating system allows a perpetrator to cause a service failure or execute arbitrary code.
The vulnerability of the GATT Generic Attribute Profile implementation in the Bluetooth protocol stack for the Linux BlueZ operating system is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures...
A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application which leads to a possible memory leak or a denial of service.
...
SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2022:3119-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3119-1 advisory. - CVE-2021-20224: Fixed an integer overflow that could be triggered via a crafted file bsc120280...
OESA-2022-1884 OpenEXR security update
OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fixes: A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to...
Buffer overflow
A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick the application into allocating huge buffer sizes like 64 Gigabyte upon reading the file from disk or from a virtual buffer...
Allocation of Resources Without Limits or Throttling
A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick the application into allocating huge buffer sizes like 64 Gigabyte upon reading the file from disk or from a virtual buffer...
