ffjpeg 缓冲区错误漏洞

ffjpeg is a JPEG encoder/decoder. A buffer overflow vulnerability exists in ffjpeg, which stems from the jfifencode function in the product/src/jfif.c file failing to properly handle memory boundaries, and can be exploited by attackers to cause a denial of service via special jpeg files...

Radareorg Radare2 缓冲区错误漏洞

radare2 is a set of libraries and tools for working with binary files. radareorg Radare2 suffers from a buffer overflow vulnerability that stems from the product's failure to effectively determine memory boundaries, which could be exploited by an attacker to cause a buffer overflow...

radare2 缓冲区错误漏洞

radare2 is a set of libraries and tools for working with binary files. radareorg Radare2 suffers from a buffer overflow vulnerability that stems from the product's failure to effectively determine memory boundaries, which could be exploited by an attacker to cause a buffer overflow...

Zephyr 缓冲区错误漏洞

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. A buffer error vulnerability exists in Zephyr that stems from a failure of the product's usb device to properly handle memory boundaries. An attacker could cause a buffer overflow through this...

Sealevel Systems SeaConnect 370W 缓冲区错误漏洞

Sealevel Systems SeaConnect 370W is an Industrial Internet of Things Iiot edge device from Sealevel Systems, Inc. A buffer overflow vulnerability exists in Sealevel Systems SeaConnect 370W, which stems from the product's OTA Update u-download feature that does not effectively limit memory...

Xterm 安全漏洞

Xterm is a terminal emulator for the X Window System by Thomas Dickey, a personal developer. It is intended to provide Dec Vt102 and Tektronix 4014 compatible terminals for programs that cannot use the window system directly. A security vulnerability exists in Xterm that arises from a networked...

Jsish 安全漏洞

Jsish is a small JavaScript parser with a built-in database written in C. Jsish is vulnerable to a buffer overflow vulnerability that originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an incorrect read or write...

The vulnerability of the `ntfs_decompress` function in the NTFS file system driver for the FUSE NTFS-3G module arises from writing beyond the buffer boundaries in memory. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfsdecompress function in the NTFS file system driver for the FUSE NTFS-3G module is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service...

The vulnerability of Adobe Premiere Rush software arises from an operation that goes beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe Premiere Rush arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

The vulnerability of the Adobe Photoshop graphic editor arises from an operation that allows data to escape out of the buffer, allowing a hacker to disclose protected information.

The vulnerability of the Adobe Photoshop graphic editor arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

lighttpd Buffer Overflow Vulnerability

lighttpd is an open source web server. A buffer overflow vulnerability exists in Lighttpd versions 1.4.46 through 1.4.63, which stems from the modextforwardForwarded function in the product's modextforward plugin failing to handle memory boundaries effectively. An attacker could exploit this...

Omron CX-One Buffer Overflow Vulnerability (CNVD-2022-04998)

Omron CX-One is an integrated toolkit from Omron Japan. The product includes an inverter, temperature controller, and PLC programming software. A buffer overflow vulnerability exists in Omron CX-One, which stems from the product not effectively limiting memory boundaries when processing specific...

VMware ESXi Buffer Overflow Vulnerability

Vmware VMware ESXi is a server virtualization platform from Vmware that can be installed directly on physical servers. A buffer overflow vulnerability exists in several Vmware products, which stems from a failure of the product's CD-ROM device emulation feature to properly determine memory...

Libbpf 缓冲区错误漏洞

Libbpf is an open source user-space library/API for loading and interacting with BPF programs. A buffer error vulnerability exists in Libbpf, which stems from the product's bpfobjectopenmem and bpf-object-fuzzer.c's bpfobjectopen not having effective control over memory boundaries. An attacker...

Wolfssl 缓冲区错误漏洞

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, Inc. in the United States. A buffer error vulnerability exists in Wolfssl wolfMQTT that stems from the product's failure to properly determine memory boundaries when calling...

Huawei HarmonyOS Heap Buffer Overflow Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. Huawei HarmonyOS is vulnerable to a heap buffer overflow vulnerability, which originates when a component of the product fails to properly determine memory boundaries. An attacker could exploit the vulnerability to rewrite th...

gif2apng buffer overflow vulnerability (CNVD-2022-02788)

gif2apng is a simple program that converts animations from GIF to APNG format. gif2apng suffers from a buffer overflow vulnerability that stems from the product's main function not doing a valid restriction on memory boundaries, which can be exploited by an attacker to cause a buffer overflow...

The vulnerability of the Linux operating system’s kernel, related to writing beyond buffer boundaries in memory, allows a hacker to cause a service failure.

The vulnerability in the drivers/video/fbdev/core/fbcon.c file of the Linux operating system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Adobe After Effects 缓冲区错误漏洞

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe, which is mainly used for 2D and 3D compositing, animation and visual effects production. An out-of-bounds read vulnerability exists in Adobe After Effects versions 18.4....

Adobe After Effects 缓冲区错误漏洞

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is primarily used for 2D and 3D compositing, animation, and visual effects production. A buffer error vulnerability exists in Adobe After Effects that stems...