Fedora 39 : freerdp (2024-01689e51e5)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-01689e51e5 advisory. Update to 2.11.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

openSUSE 15 Security Update : hugin (openSUSE-SU-2024:0047-1)

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0047-1 advisory. - An issue in the HuginBase::PanoramaMemento::loadPTScript function of Hugin v2022.0.0 allows attackers to cause a heap buffer overflow via parsi...

Fedora 38 : freerdp (2024-f294ddb7fb)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-f294ddb7fb advisory. Update to 2.11.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

CVE-2024-0018

In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-0018

The vulnerability CVE-2024-0018 affects Android Media Codecs (ColorConverter.cpp) in ColorConverter::convertYUV420Planar16ToY410, where a heap-based out-of-bounds write is possible. This could enable local escalation of privilege with no additional execution privileges and requires no user intera...

CVE-2024-0018

In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-0018

In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-0040

CVE-2024-0040 centers on a heap buffer overflow in the setParameter function of MtpPacket.cpp, causing a possible out-of-bounds read and remote information disclosure without privileges or user interaction. Multiple trusted sources (NVD, Red Hat, PRION, Vuln enrichment, CVE lists, and Android sec...

CVE-2024-0033

In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-0033

In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-0033

CVE-2024-0033 concerns Android’s ashmem-dev.cpp, where a heap buffer overflow may cause a missing seal. The effect is local elevation of privilege with no extra user interaction required, per the documents. The available sources consistently describe the issue’s presence in ashmem-dev.cpp and its...

CVE-2023-40110

In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2023-40110

CVE-2023-40110 is tied to a heap buffer overflow in multiple MtpPacket.cpp functions, causing an out-of-bounds write that could enable local privilege escalation with user interaction required. Connected sources (NVD/Red Hat/PRION/CNNVD/Android bulletin) consistently reference MtpPacket.cpp as th...

CVE-2023-40110

In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2023-40110

In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

SUSE-SU-2024:0517-1 Security update for libaom

This update for libaom fixes the following issues: - CVE-2023-6879: Fixed a heap buffer overflow when increasing the video frame resolution bsc1218429...

CVE-2022-23088 802.11 heap buffer overflow

The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. While a FreeBSD Wi-Fi client is in scanning mode i.e., not associated with a SSID a malicious beacon frame may overwrite kernel memory, leading to remote code...

OSV-2024-104 Heap-buffer-overflow in mrb_memsearch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66689 Crash type: Heap-buffer-overflow READ 3 Crash state: mrbmemsearch strconvertrange mrbstraref...

OSV-2024-102 Heap-buffer-overflow in mrb_memsearch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66423 Crash type: Heap-buffer-overflow READ 2 Crash state: mrbmemsearch mrbstrsplitm mrbvmexec...

Adobe Audition 安全漏洞

Adobe Audition is a set of multi-track editing tools from the American company Audobee Adobe. The product is mainly used to include multi-track, waveforms and spectral display of the perfect toolset for audio content mixing, editing and creation. Adobe Audition suffers from a heap buffer overflow...