CVE-2021-28610

CVE-2021-28610 affects Adobe After Effects 18.2 and earlier. The vulnerability is a heap-based buffer overflow that occurs while parsing a specially crafted file, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious...

CVE-2021-28603

CVE-2021-28603 affects Adobe After Effects 18.2 and earlier. It is a heap-based buffer overflow triggered while parsing a specially crafted file, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affec...

CVE-2021-32263

CVE-2021-32263 affects the ok-file-formats project. The vulnerability is a heap-based buffer overflow in the ok_csv_circular_buffer_read function within ok_csv.c, with affected releases up to 2021-04-29. The initial entry provides no explicit exploitation details, affected versions beyond the dat...

CVE-2021-28603: Heap-based Buffer Overflow

Adobe After Effects version 18.2 and earlier is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-28610: Heap-based Buffer Overflow

Adobe After Effects version 18.2 and earlier is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-28620: Heap-based Buffer Overflow

Adobe Animate version 21.0.6 and earlier is affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

CVE-2021-28608: Heap-based Buffer Overflow

Adobe After Effects version 18.2 and earlier is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-28604: Heap-based Buffer Overflow

Adobe After Effects version 18.2 and earlier is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-28629: Heap-based Buffer Overflow

Adobe Animate version 21.0.6 and earlier is affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

CVE-2021-32263: Out-of-bounds Write

ok-file-formats through 2021-04-29 has a heap-based buffer overflow in the okcsvcircularbufferread function in okcsv.c...

openSUSE: Security Advisory for libass (openSUSE-SU-2021:1174-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 Security Update : aspell (SUSE-SU-2021:2794-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2794-1 advisory. - CVE-2019-25051: Fixed heap-buffer-overflow in acommon:ObjStack:duptop bsc1188576. Tenable has extracted the preceding description block...

openSUSE 15 Security Update : libass (openSUSE-SU-2021:2792-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2792-1 advisory. - libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data...

openSUSE 15 Security Update : libass (openSUSE-SU-2021:1174-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1174-1 advisory. - libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data...

SUSE SLED15 / SLES15 Security Update : libass (SUSE-SU-2021:2792-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2792-1 advisory. - CVE-2020-36430: Fixed heap-based buffer overflow in decodechars bsc1188539. Tenable has extracted the preceding description block...

Security update for libass (important)

openSUSE Security Update: Security update for libass Announcement ID: openSUSE-SU-2021:1174-1 Rating: important References: 1188539 Cross-References: CVE-2020-36430 CVSS scores: CVE-2020-36430 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-36430 SUSE: 7.5...

openSUSE 15 Security Update : aspell (openSUSE-SU-2021:2794-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2794-1 advisory. - objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and...

CVE-2021-21826

A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. Within DecodeTreeBlock which is called during the decompression of an XMI file, a UINT32 is loaded from the file and used as trusted input as the length of a buffer. An...

CVE-2021-21827

A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. Within DecodeTreeBlock which is called during the decompression of an XMI file, a UINT32 is loaded from the file and used as trusted input as the length of a buffer. An...

CVE-2021-21828

A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. In the default case of DecodeTreeBlock a label is created via CurPath::AddLabel in order to track the label for later reference. An attacker can provide a malicious fil...