CVE-2024-2971

Xpdf vulnerability CVE-2024-2971 affects Xpdf 4.05 and earlier, caused by an out-of-bounds write in an array triggered by a negative object number in an indirect reference in the input PDF. Fedora advisories and security notes indicate update to 4.06 as the fix. If exploiting, the issue could imp...

CVE-2024-2971: Out-of-bounds Write

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file...

CVE-2023-33706

SysAid before 23.2.15 allows Indirect Object Reference IDOR attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIframe.jsp or a modified srID parameter to ShowMessage.jsp...

nginx null pointer indirect reference vulnerability

Nginx is a very widely used high-performance web server. A null pointer indirect reference vulnerability exists in the code where Nginx saves client requests to a temporary file, where malformed requests can cause a denial of service...

Apple iOS Kernel Null Pointer Indirect Reference Vulnerability

iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. A null pointer indirect reference vulnerability exists in the Kernel implementation in versions prior to iOS 9.3, which can lead to the execution of arbitrary co...

PHP Null Pointer Indirect Reference Denial of Service Vulnerability

PHP is a widely used general-purpose scripting language that is particularly well suited for web development and can be embedded in HTML. PHP suffers from a null pointer indirect reference vulnerability in its implementation, which can be exploited by an attacker to crash an affected application...

Linux Kernel 'fs_pin.c' Null Pointer Indirect Reference Denial of Service Vulnerability

Linux Kernel is an open source operating system. Linux kernel has a vulnerability in the implementation of 'fspin.c', which allows local attackers to exploit the vulnerability for denial-of-service attacks and crash the system...