gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...

gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow

A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...

CVE-2023-21716-POC

Storia Nel febbraio 2023, Microsoft ha corretto una vulnerabilità critica in Microsoft Word, identificata come CVE-2023-21716 con un punteggio CVSS di 9.8, che poteva consentire agli aggressori di eseguire codice remoto senza autenticazione. Questa vulnerabilità interessava anche il riquadro di...

porfolio-Baron-Samedit

porfolio-Baron-Samedit Dies ist eine Studie über CVE-2021-3156: Heap-basierter Pufferüberlauf in Sudo Baron Samedit...

CVE-2021-3156-Sudo-Buffer-Overflow-Linux

CVE-2021-3156 – Overflow del Buffer di Sudo Linux Exploit di Escalation dei Privilegi Baron Samedit 📌 Panoramica Questo progetto dimostra lo sfruttamento di CVE-2021-3156 Baron Samedit , una vulnerabilità critica di overflow del buffer basato su heap nell'utilità Linux sudo. La vulnerabilità...

CVE-2025-50360

Overflow del Buffer nell'Heap in Pepper Language Pepper Language è un linguaggio di programmazione interpretato veloce, progettato per semplicità e verbosezza. È tipizzato dinamicamente e supporta la garbage collection. Versione affetta: Versione 0.1.1 e precedenti, Commit...

CVE-2023-27997-check

CVE-2023-27997 Vulnerability Assessment Tool Sicher erkennen, ob eine FortiGate SSL VPN-Instanz basierend auf Antwortzeiten für CVE-2023-27997 anfällig ist. Siehe den vollständigen Artikel im Bishop Fox Blog, einschließlich einer kompletten Schritt-für-Schritt-Erklärung der Methodik hinter diesem...

rendering-code-outside-the-sandbox-cve-2026-76036-dawn-webgpu-buffer-overflow-in-chrome-on-android

CVE-2026-76036 — Dawn WebGPU Erkennungs-Harness für NPOT-Tiefen-/Stencil-Mipmaps Kritischer CVSS 9.6, CWE-122 Heap-Pufferüberlauf in Dawn , Chromiums WebGPU-Implementierung, in Google Chrome unter Android vor 151.0.7922.169 Stable 151, veröffentlicht am 18.08.2026. Grundursache laut Dawn-Fix-Comm...

CVE-2026-78465

A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...

CVE-2026-77652

A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren-pPal = gnew0WPGColorRGB, 256; When handling a WPGCOLORMAP record, the parser reads a start index i16 and...

gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow

A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...

gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...

CVE-2026-78465

An integer overflow in the file-pcx plugin of GIMP affects 32-bit builds only . When a crafted PCX image file sets the number of color planes to 4 alongside sufficiently large dimensions, the memory allocation size calculation exceeds the 32-bit integer limit, producing an undersized heap buffer ...

EUVD-2026-64935

A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...

CVE-2026-78465

A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...

libwebp-checker

中文 | EN Strumenti di verifica delle dipendenze libwebp CVE-2023-4863 Questo strumento verifica se l'applicazione o il processo del tuo server è affetto da CVE-2023-4863, una vulnerabilità di overflow del buffer heap in libwebp versioni superiori alla 0.5.0. Esegui questo script nel tuo ambiente d...

Important: Red Hat Security Advisory: sqlite security update

An update for sqlite is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

CVE-2026-19874

A heap-based buffer overflow vulnerability exists in Konami's Metal Gear Online 3, originating from improper validation of lobby data fields related to kicked players. The affected function processes a list of kicked player identifiers using the lobby data key "kicknum" to determine the number of...