MJM Core Player 安全漏洞

MJM Core Player is an audio player from MJM Australia. A security vulnerability exists in MJM Core Player version 2011 that originates from a stack-based buffer overflow when parsing .s3m files, which could lead to the execution of arbitrary code...

PT-2025-34182

Name of the Vulnerable Software and Affected Versions: Oxford Instruments Imaris Viewer affected versions not specified Description: The software contains an out-of-bounds write flaw in the IMS file parsing functionality, potentially leading to remote code execution. Recommendations: At the momen...

(0Day) Oxford Instruments Imaris Viewer IMS File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oxford Instruments Imaris Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

PT-2025-34181

Name of the Vulnerable Software and Affected Versions: Oxford Instruments Imaris Viewer affected versions not specified Description: The software contains a remote code execution issue due to an uninitialized pointer during IMS file parsing. Recommendations: At the moment, there is no information...

Linux Distros Unpatched Vulnerability : CVE-2025-5473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...

CVE-2025-53705

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing CO files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute...

CVE-2025-41392

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing AR files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute...

CVE-2025-46269 Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share Heap-based Buffer Overflow

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing VC6 files. This could lead to a heap-based buffer overflow. An attacker could leverage this vulnerability to execut...

CVE-2025-52584

CVE-2025-52584 affects Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share prior to version 12.6.1204.204. The issue is a lack of input validation while parsing XE files, which can cause a heap-based buffer overflow and allow arbitrary code execution in the affected process. Public sour...

CVE-2025-52584 Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share Heap-based Buffer Overflow

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing XE files. This could lead to a heap-based buffer overflow. An attacker could leverage this vulnerability to execute...

CVE-2025-41392

CVE-2025-41392 affects Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share prior to 12.6.1204.204. The root cause is lack of validation of user-supplied data when parsing AR files, which can lead to an out-of-bounds read and allow arbitrary code execution in the current process. Public ...

CVE-2025-41392 Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share Out-of-bounds Read

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing AR files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute...

CVE-2025-53705

Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204 contain a parsing flaw in CO files that can cause an out-of-bounds write, potentially allowing an attacker to execute arbitrary code in the current process. Multiple sources (NVD, Red Hat, CVE listing, P...

Ashlar-Vellum多款产品 缓冲区错误漏洞

Ashlar-Vellum Xenon and others are products of Ashlar-Vellum.Ashlar-Vellum Xenon is a CAD modeling software.Ashlar-Vellum Cobalt is a parametric-based computer-aided design and 3D modeling program.Ashlar-Vellum Argon is A 2D drafting and 3D modeling software. A buffer error vulnerability exists i...

PT-2025-33698 · Ashlar Vellum · Ashlar-Vellum Cobalt +4

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt versions prior to 12.6.1204.204 Ashlar-Vellum Xenon versions prior to 12.6.1204.204 Ashlar-Vellum Argon versions prior to 12.6.1204.204 Ashlar-Vellum Lithium versions prior to 12.6.1204.204 Ashlar-Vellum Cobalt Share...

Linux Distros Unpatched Vulnerability : CVE-2024-24685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can lead to stack-based...

Linux Distros Unpatched Vulnerability : CVE-2023-35958

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst...

CVE-2025-5047 DGN File Parsing Uninitialized Variable Vulnerability

A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-5046 DGN File Parsing Out-of-Bounds Read Vulnerability

A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-5046 DGN File Parsing Out-of-Bounds Read Vulnerability

A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...