The vulnerability of Adobe InDesign’s computer layout automation tool, related to reading data beyond the buffer in memory, allows attackers to circumvent ASLR protection and gain unauthorized access to protected information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to bypass ASLR protection and gain unauthorized access to protected information...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : libxslt vulnerability (USN-7600-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7600-1 advisory. It was discovered that libxslt could be made to expose sensitive information about address space layout. An attack...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the swapping of pointers, allows a hacker to trigger a service failure.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer limit, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing outside the buffer. Exploiting this vulnerability allows a attacker to execute arbitrary code using a specially created malicious file...

The vulnerability of Adobe InDesign’s computer font automation tool, related to the use of memory after it is freed, allows attackers to bypass the ASLR protection mechanism and gain unauthorized access to protected information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to bypass ASLR protection and gain unauthorized access to protected information...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the use of memory after it is released. Exploiting this vulnerability allows a attacker to execute arbitrary code using a specially created malicious file...

PT-2025-35964

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the pNFS block/scsi layout implementation. The issue arises from a dereference of uninitialized pointers within the ext tree free commitdata function...

Ubuntu: Security Advisory (USN-7600-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the H5O__layout_encode function in the H5Olayout.c component of the HDF file processing library allows a attacker to cause a service failure.

The vulnerability of the H5Olayoutencode function in the H5Olayout.c component of the HDF file processing library is related to the escape of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures using a specially created...

USN-7600-1: libxslt vulnerability

It was discovered that libxslt could be made to expose sensitive information about address space layout. An attacker could possibly use this issue to bypass Address Space Layout Randomization ASLR protections...

USN-7600-1 libxslt vulnerability

It was discovered that libxslt could be made to expose sensitive information about address space layout. An attacker could possibly use this issue to bypass Address Space Layout Randomization ASLR protections...

Samsung S24 MP3 Decoder Out-Of-Bounds Read

There is an out-of-bounds read in the MP3 decoder in the Samsung S24. The function smp123djointstereov1 indexes into several tables for decoding, and does not check that the index is valid, allowing the tables to be read out of bounds. It may be possible to use this bug to bypass ASLR, as loading...

Malicious code in gs_isotope-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc9cf2e5331d05d054643fdf750024a8608fd9527d09ee3b9f0ce18a0a424064 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5227 Malicious code in gs_isotope-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc9cf2e5331d05d054643fdf750024a8608fd9527d09ee3b9f0ce18a0a424064 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the _pnfs_return_layout() function in the fs/nfs/pnfs.c module of the Linux kernel file system allows a hacker to cause a service failure.

The vulnerability of the pnfsreturnlayout function in the fs/nfs/pnfs.c module of the Linux kernel file system lies in the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Malicious code in postcss-layout-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 462502060afb8b130fe73ec2cf8940f9cc7e7d86e3a70ad48606a6b1b4484231 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5200 Malicious code in postcss-layout-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 462502060afb8b130fe73ec2cf8940f9cc7e7d86e3a70ad48606a6b1b4484231 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2022-50072

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: Fix a use-after-free bug in open If someone cancels the open RPC call, then we must not try to free either the open slot or the layoutget operation arguments, since they are likely still in use by the hung RPC call...

Malicious code in dojox.layout.expandopane (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4d8c95926f5af3cacdfd043cd5ec597124451062eac060c9d24c418bf4d7fab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dijit.layout.bordercontainer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 268d7fbff2e8226f7aafd1f838c0cbd16e53ea3d1542e81c9771945ebc3bf7da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...