CVE-2022-0261

CVE-2022-0261 is a Vim heap-based buffer overflow affecting vim/vim prior to 8.2. Connected advisories (Astra Linux, Cloud Foundry USN, and Apple security page) confirm Vim heap-buffer issues across multiple CVEs and list Vim updates as the remediation path. For CVE-2022-0261, the vendor-provided...

PT-2022-1729

Name of the Vulnerable Software and Affected Versions vim versions prior to 8.2 Description The issue is a heap-based buffer overflow in the vim repository. This overflow is caused by the block insert function in src/ops.c, which leads to a dynamic memory buffer overflow. An attacker could exploi...

PT-2022-1725

Name of the Vulnerable Software and Affected Versions vim versions prior to 8.2 Description The issue is related to a heap-based buffer overflow in the vim text editor, specifically in the utf head off function. This overflow can be triggered by exploiting the vulnerability, potentially allowing ...

SUSE SLED15 / SLES15 Security Update : ghostscript (SUSE-SU-2022:0088-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0088-1 advisory. - CVE-2021-45944: Fixed use-after-free in sampleddatasample bsc1194303 - CVE-2021-45949: Fixed heap-based buff...

MGASA-2022-0020 Updated openexr packages fix security vulnerability

OpenEXR 3.1.0 through 3.1.3 has a heap-based buffer overflow in Imf31::LineCompositeTask::execute called from IlmThread31::NullThreadPoolProvider::addTask and IlmThread31::ThreadPool::addGlobalTask. CVE-2021-45942...

Updated openexr packages fix security vulnerability

OpenEXR 3.1.0 through 3.1.3 has a heap-based buffer overflow in Imf31::LineCompositeTask::execute called from IlmThread31::NullThreadPoolProvider::addTask and IlmThread31::ThreadPool::addGlobalTask. CVE-2021-45942...

Heap-based Buffer Overflow

vim.so is vulnerable to heap-based buffer overflow. The lack of sanitization causes a heap-based buffer overflow which could result in an application crash...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to a heap-based Buffer Overflow allowing an attacker to crash the system...

SUSE SLES12 Security Update : ghostscript (SUSE-SU-2022:0081-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0081-1 advisory. - CVE-2021-45944: Fixed use-after-free in sampleddatasample bsc1194303 - CVE-2021-45949: Fixed heap-based buffer overflow in...

CVE-2021-23157

WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code...

Heap overflow

WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code...

CVE-2021-45781

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2021-23157 WECON LeviStudioU

WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code...

CVE-2021-23157 WECON LeviStudioU

WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code...

CVE-2022-0213

vim is vulnerable to Heap-based Buffer Overflow...

Heap overflow

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2022-0213

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2022-0213

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2022-0213 Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-44708: Heap-based Buffer Overflow

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a heap overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation of...