706 matches found
libigl readOFF stack-based buffer overflow vulnerabilities
Talos Vulnerability Report TALOS-2023-1784 libigl readOFF stack-based buffer overflow vulnerabilities May 28, 2024 CVE Number CVE-2023-35950,CVE-2023-35953,CVE-2023-35952,CVE-2023-35951,CVE-2023-35949 SUMMARY Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp...
OESA-2024-1557 xorg-x11-server-xwayland security update
Xwayland is an X server for running X clients under Wayland. Security Fixes: A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.CVE-2023-6478 A...
CVE-2024-29189
PyAnsys Geometry is a Python client library for the Ansys Geometry service and other CAD Ansys products. On file src/ansys/geometry/core/connection/productinstance.py, upon calling this method startprogram directly, users could exploit its usage to perform malicious operations on the current...
CVE-2024-29189
CVE-2024-29189 affects the PyAnsys Geometry library (ansys-geometry-core) and specifically the internal _start_program routine in src/ansys/geometry/core/connection/product_instance.py. The vulnerability arises from invoking subprocess.Popen with a shell context (shell flag enables shell executio...
CVE-2024-29189 ansys-geometry-core OS Command Injection vulnerability
PyAnsys Geometry is a Python client library for the Ansys Geometry service and other CAD Ansys products. On file src/ansys/geometry/core/connection/productinstance.py, upon calling this method startprogram directly, users could exploit its usage to perform malicious operations on the current...
CVE-2024-29189 ansys-geometry-core OS Command Injection vulnerability
PyAnsys Geometry is a Python client library for the Ansys Geometry service and other CAD Ansys products. On file src/ansys/geometry/core/connection/productinstance.py, upon calling this method startprogram directly, users could exploit its usage to perform malicious operations on the current...
pyansys (>=2024.1.0, <=2024.1.8) potentially affected by CVE-2024-29189 via ansys-geometry-core (>=0.4.3, <=0.4.11)
ansys-geometry-core PYPI version =0.4.3, =2024.1.0, =2024.1.8 Source cves: CVE-2024-29189 Source advisory: MEND:CVE-2024-29189...
CVE-2024-29189
PyAnsys Geometry is a Python client library for the Ansys Geometry service and other CAD Ansys products. On file src/ansys/geometry/core/connection/productinstance.py, upon calling this method startprogram directly, users could exploit its usage to perform malicious operations on the current...
CVE-2024-29189: Improper Neutralization of Special Elements used in an OS Command
PyAnsys Geometry is a Python client library for the Ansys Geometry service and other CAD Ansys products. On file src/ansys/geometry/core/connection/productinstance.py, upon calling this method startprogram directly, users could exploit its usage to perform malicious operations on the current...
PyAnsys Geometry security vulnerabilities
PyAnsys Geometry is an Ansys open source Python client library for the Ansys Geometrics service and other CAD Ansys products such as Ansys Discovery and Ansys SpaceClaim. A security vulnerability exists in PyAnsys Geometry. An attacker can exploit the vulnerability to perform malicious actions on...
ansys-geometry-core OS Command Injection vulnerability
subprocess call with shell=True identified, security issue. Code On file src/ansys/geometry/core/connection/productinstance.py: 403 def startprogramargs: Liststr, localenv: Dictstr, str - subprocess.Popen: 404 """ 405 Start the program where the path is the first item of the args array argument...
pyansys (>=2024.1.0, <=2024.1.8) potentially affected by CVE-2024-29189 via ansys-geometry-core (>=0.4.3, <=0.4.11)
ansys-geometry-core PYPI version =0.4.3, =2024.1.0, =2024.1.8 Source cves: CVE-2024-29189 Source advisory: OSV:GHSA-38JR-29FH-W9VM...
pyansys (>=2024.1.0, <=2024.1.8) potentially affected by CVE-2024-29189 via ansys-geometry-core (>=0.4.3, <=0.4.11)
ansys-geometry-core PYPI version =0.4.3, =2024.1.0, =2024.1.8 Source cves: CVE-2024-29189 Source advisory: GHSA-38JR-29FH-W9VM...
PT-2024-22792
Name of the Vulnerable Software and Affected Versions PyAnsys Geometry versions prior to 0.3.3 PyAnsys Geometry versions prior to 0.4.12 Description The issue concerns a Python client library for the Ansys Geometry service and other CAD Ansys products. Upon calling the start program method...
Siemens Parasolid Null Pointer Dereference Vulnerability
Parasolid is a 3D geometry modeling tool that supports a variety of techniques including solid modeling, direct editing and free-form surface/table modeling. Siemens Parasolid null pointer dereference vulnerability can be exploited by an attacker to crash an application, resulting in a denial of...
DEBIAN-CVE-2023-32650
An integer overflow vulnerability exists in the FSTBLGEOM parsing maxhandle functionality of GTKWave 3.3.115, when compiled as a 32-bit binary. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability...
UBUNTU-CVE-2023-38623
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-34561
A buffer overflow in the level parsing code of RobTop Games AB Geometry Dash v2.113 allows attackers to execute arbitrary code via entering a Geometry Dash level...
