CVE-2025-30324 Photoshop Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)

Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2025-30324

CVE-2025-30324 affects Adobe Photoshop Desktop versions 26.5, 25.12.2 and earlier, due to an Integer Underflow (Wrap or Wraparound). The issue could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: opening a malicious file. Connected sourc...

CVE-2025-30322 Substance3D - Painter | Out-of-bounds Write (CWE-787)

Substance3D - Painter versions 11.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-30310

Dreamweaver Desktop versions 21.4 and earlier are affected by an Access of Resource Using Incompatible Type 'Type Confusion' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must...

CVE-2025-30320

InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption in service. Exploitation of this issue requir...

CVE-2025-30310

Dreamweaver Desktop versions 21.4 and earlier are affected by an Access of Resource Using Incompatible Type 'Type Confusion' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must...

CVE-2025-30319

InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue...

CVE-2025-30318 InDesign Desktop | Out-of-bounds Write (CWE-787)

InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-30318 InDesign Desktop | Out-of-bounds Write (CWE-787)

InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-30319

The CVE-2025-30319 issue affects Adobe InDesign Desktop versions ID19.5.2, ID20.2 and earlier, as listed in multiple feeds. The vulnerability is a NULL Pointer Dereference that can cause an application denial-of-service. Exploitation requires user interaction: a victim must open a malicious file....

gimp: PSD buffer overflow RCE

A parsing vulnerability was found in the GNU Image Manipulation Program GIMP. This flaw allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious PSD file, possibly enabling the execution of unauthorized code within the GIMP process...

gimp: dds buffer overflow RCE

A parsing vulnerability was found in the GNU Image Manipulation Program GIMP. This flaw allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious DDS file, possibly enabling the execution of unauthorized code within the GIMP process...

CVE-2025-3916

CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to exploit these issues to potentially execute arbitrary code while the end user opens a malicious project file SSD file provided by the attacker...

CVE-2025-3916

CVE-2025-3916 concerns Schneider Electric EcoStruxure Power Build Rapsody. A stack-based buffer overflow (CWE-121) could allow a local attacker to potentially execute arbitrary code when a user opens a malicious SSD file, per multiple sources. The vulnerability is locally exploitable with user in...

The vulnerability of the nvJPEG2000 library in NVIDIA GPU graphics software allows a hacker to rewrite data in the memory buffer.

The vulnerability of the nvJPEG2000 library in NVIDIA GPU graphics software is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to rewrite data in the memory buffer using a specially created malicious file...

PT-2025-20982 · Adobe · Dreamweaver

Name of the Vulnerable Software and Affected Versions: Dreamweaver Desktop versions 21.4 and earlier Description: The issue is an Access of Resource Using Incompatible Type, also known as 'Type Confusion', which could result in arbitrary code execution in the context of the current user...

Adobe Substance3D 资源管理错误漏洞

Adobe Substance3D-Stager is a 3D design and rendering software developed by Adobe for creating and presenting 3D scenes. Adobe Substance3D-Stager suffers from a Resource Management Error vulnerability that originates from the continued use of freed memory after memory release. An attacker can...

Adobe InDesign < 19.5.3 / 20.0 < 20.3.0 Multiple Vulnerabilities (APSB25-37)

The version of Adobe InDesign installed on the remote Windows host is prior to 19.5.3, 20.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-37 advisory. - InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by an out-of-bounds write...

Adobe Illustrator < 28.7.6 / 29.0 < 29.4 Arbitrary code execution (APSB25-43)

The version of Adobe Illustrator installed on the remote Windows host is prior to 28.7.6, 29.4. It is, therefore, affected by a vulnerability as referenced in the APSB25-43 advisory. - Illustrator versions 29.3, 28.7.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that...

Adobe Dreamweaver 21.0 < 21.5 Arbitrary code execution (APSB25-35) (macOS)

The version of Adobe Dreamweaver installed on the remote macOS host is prior to 21.5. It is, therefore, affected by a vulnerability as referenced in the APSB25-35 advisory. - Dreamweaver Desktop versions 21.4 and earlier are affected by an Access of Resource Using Incompatible Type 'Type Confusio...