581 matches found
If the subscription does not have enough funds the winner can not be chosen
Lines of code Vulnerability details Impact VRF's subscriptionId can be chosen by the drawer, and it is the drawer's responsibility to fund the subscription. If the drawer, maliciously or not, fails to do so, the draw will result in no winners, and the drawer can re-claim the offered NFT...
Prize token can overlap with drawingToken and prize tokens from other draws.
Lines of code Vulnerability details Impact Creators can create multiple draws with the same prize, but only the first draw to call startDraw will have the prize. This can trick users into entering raffle pools that does not have a prize. Furthermore, the prize token can also be one of the tokens ...
lastResortTimelockOwnerClaimNFT() can retrieve the token although drawing is in progress
Lines of code Vulnerability details Impact owner can retrieve the token although drawing is in progress Proof of Concept lastResortTimelockOwnerClaimNFT Be used in: " If no users ultimately claim the NFT, the admin specifies a timelock period after which they can retrieve the raffled NFT. " But i...
PT-2022-14740 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing bounds check in the CanvasContext::draw function of CanvasContext.cpp, which can lead to a possible out of bounds write. This could result in local escalation of...
The vulnerability of the vector graphics editor CorelDRAW Graphics Suite (formerly CorelDRAW) relates to the execution of operations beyond the buffer boundaries in memory, allowing attackers to execute arbitrary code.
The vulnerability of the CorelDRAW Graphics Suite formerly CorelDRAW graphic editor relates to the execution of operations beyond the buffer boundaries in memory during the syntax analysis of PCX files. Exploiting this vulnerability can allow attackers to execute arbitrary code using a specially...
The vulnerability of the vector graphics editor CorelDRAW Graphics Suite (formerly CorelDRAW) relates to the execution of operations beyond the buffer boundaries in memory, allowing attackers to execute arbitrary code.
The vulnerability of the CorelDRAW Graphics Suite formerly CorelDRAW graphic editor relates to the execution of operations beyond the buffer boundaries in memory during the syntax analysis of PCX files. Exploiting this vulnerability can allow attackers to execute arbitrary code using a specially...
CVE-2022-35096
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via drawstroke at /gfxpoly/stroke.c...
UBUNTU-CVE-2022-35096
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via drawstroke at /gfxpoly/stroke.c...
SWFTools 缓冲区错误漏洞
SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools, which stems from a heap buffer overflow in the drawstroke location of /gfxpoly/stroke.c. The vulnerability is caused by the use of...
GHSA-JQM7-M5Q7-3HM5 TensorFlow vulnerable to `CHECK` fail in `DrawBoundingBoxes`
Impact When DrawBoundingBoxes receives an input boxes that is not of dtype float, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf import numpy as np arg0=tf.constantvalue=np.random.randomsize=1, 3, 2, 3, shape=1, 3, 2, 3, dtype=tf.half...
PT-2022-23100
Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1 and earlier TensorFlow versions 2.8.1 and earlier TensorFlow versions 2.7.2 and earlier Description The issue occurs when the DrawBoundingBoxes function receives an input boxes that...
CVE-2022-35109
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via drawstroke at /gfxpoly/stroke.c...
UBUNTU-CVE-2022-35109
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via drawstroke at /gfxpoly/stroke.c...
SWFTools 缓冲区错误漏洞
SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that originates from a heap buffer overflow in drawstroke in the /gfxpoly/stroke.c file...
PT-2022-22576 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A heap-buffer overflow issue was discovered in SWFTools via the draw stroke function at /gfxpoly/stroke.c. Recommendations: At the moment, there is no information about a newer version tha...
Binary vulnerability in CAD mini-drawing at Shanghai Xiaosai Technology Co. Ltd (CNVD-2022-63237)
CAD Mini Drawing is a CAD drawing software. Ltd. CAD Mini Drawing has a binary vulnerability that can be exploited by attackers to cause a local software crash...
Stored XSS on drawio
Sumary Draw io has a feature to put links on a text, due to a bad sanitization it allows to put javascript:// scheme on a anchor tag which allows to execute javascript code Steps to reproduce 1. Create a text box and set word size to 50 2. Click with the rigth button and "Edit link" 3. Put...
CVE-2021-32434
abcm2ps v8.14.11 was discovered to contain an out-of-bounds read in the function calculatebeam at draw.c...
The vulnerability of Adobe Illustrator, related to data writing beyond the buffer, allows a hacker to execute arbitrary code.
The vulnerability of Adobe Illustrator graphic editor is related to the writing of data beyond the buffer during the processing of CDR files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
