CVE-2021-32420

dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y...

CVE-2021-46174

CVE-2021-46174 is a heap-based buffer overflow in GNU Binutils objdump (function bfd_getl32). Multiple connected advisories reference the same issue, with descriptions asserting a heap overflow in Binutils objdump 3.37 and related components. The CVE is associated with potential denial-of-service...

CVE-2021-32420

dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y...

Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-6302-1)

The remote Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6302-1 advisory. It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening ...

SUSE SLED12: ImageMagick / ImageMagick-config-6-SUSE / etc (SUSE-SU-2023:3357-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3357-1 advisory. - CVE-2023-3745: Fixed heap out of bounds read in PushCharPixel in quantum-private.h bsc1213624. Tenable has extracted...

PDF-XChange Editor OXPS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : LibTIFF vulnerabilities (USN-6290-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6290-1 advisory. It was discovered that LibTIFF could be made to write out of bounds when processing certain malformed image...

CVE-2023-4322

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0...

CVE-2023-4322

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0...

CVE-2023-4322 Heap-based Buffer Overflow in radareorg/radare2

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0...

CVE-2023-4322

Vulnerability: CVE-2023-4322 affects radare2 prior to 5.9.0. The issue is a heap-based/buffer overflow arising from boundary handling when processing untrusted input (notably in the brainfuck dissassembler per Fedora advisories). Impact as stated: potential remote code execution or a crash/DoS, d...

CVE-2023-40305

GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file...

CVE-2023-40295

libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...

Adobe Dimension GLB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of GLB...

CVE-2023-40294

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...

Amazon Linux AMI : ImageMagick (ALAS-2023-1791)

The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1.27. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1791 advisory. A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel function in quantum- private.h. This issue ma...

Amazon Linux 2 : ImageMagick (ALAS-2023-2178)

The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2178 advisory. A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel function in quantum- private.h. This issue may...

CVE-2023-40305

GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file...

CVE-2023-40294

CVE-2023-40294 affects Boron 2.0.8, specifically the libboron component; the heap-based buffer overflow occurs in ur_parseBlockI (i_parse_blk.c). The vulnerability is rated with CVSSv3.1: Network attack vector, low complexity, no privileges, user interaction required, and Availability impact High...

CVE-2023-40305

CVE-2023-40305 affects GNU indent 2.2.13 with a heap-based overflow in search_brace inside indent.c triggered by a crafted file. The reachable impact is availability loss (per CVSS 3.1: A=High) with local attack vector and required user interaction. Supported details indicate the vulnerability ex...