CVE-2025-24439 Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

Substance3D - Sampler versions 4.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-24439

CVE-2025-24439 relates to Adobe Substance 3D Sampler. Affected: versions 4.5.2 and earlier. Issue: heap-based buffer overflow in Substance3D Sampler could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Pu...

CVE-2025-24995

Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-24066

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2025-24050

Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2025-21169

Substance3D - Designer versions 14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21169

Substance3D - Designer versions 14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21180

CVE-2025-21180 is a Windows exFAT File System vulnerability described as a heap-based buffer overflow that could allow local code execution. The connected documents identify the affected component as the Windows exFAT file system driver and confirm the root cause as a heap-based overflow, enablin...

CVE-2025-26634

CVE-2025-26634 describes a heap-based buffer overflow in Windows Core Messaging that could allow an unauthenticated? not; authorized attacker to elevate privileges over a network. The CVE entry lists a CVSS v3.1 base score of 7.5 (HIGH) with NETWORK attack vector, HIGH impact on confidentiality/i...

CVE-2025-21169

Adobe Substance 3D Designer versions 14.1 and earlier are affected by a heap-based buffer overflow vulnerability that could allow arbitrary code execution under the current user context. Exploitation requires user interaction (the victim must open a malicious file). This CVE is CVE-2025-21169; a ...

CVE-2025-21169 Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer versions 14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

Windows Telephony Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network...

Windows exFAT File System Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally...

PT-2025-10871 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID20.1, ID19.5.2 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, where a...

Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

Microsoft Windows New Technology File System NTFS contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally...

Adobe InDesign < 19.5.3 / 20.0 < 20.2.0 Multiple Vulnerabilities (APSB25-19)

The version of Adobe InDesign installed on the remote Windows host is prior to 19.5.3, 20.2.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-19 advisory. - Out-of-bounds Write CWE-787 potentially leading to Memory Leak CVE-2025-24452, CVE-2025-27178 - Heap-bas...

CVE-2025-2153

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SMdelete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is...

CVE-2025-2153 HDF5 h5 File H5SM.c H5SM_delete heap-based overflow

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SMdelete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is...

CVE-2025-2153 HDF5 h5 File H5SM.c H5SM_delete heap-based overflow

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SMdelete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is...