ImageIO Unprotected Access

The vulnerability of the ImageIO component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS relates to reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

NVIDIA Virtual GPU Manager Unauthorized Access

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

NVIDIA Graphics Buffer Overflow

The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

PDF Document Buffer Overflow Information Disclosure

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries during file processing for PRC formats. Exploiting this vulnerability can allow attackers to disclose protected...

PDF Document Buffer Overflow Information Disclosure

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries in memory during file processing for U3D files. Exploiting this vulnerability can allow attackers to disclose protecte...

OESA-2025-1693 clamav security update

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

Dell ControlVault3 Security Driver Heap Buffer Overflow Info Disclosure

The vulnerability of the cvsendblockdata function in the Dell ControlVault3 security driver suite relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

Adaptive Substance 3D Painter Buffer Overflow

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Storage Management Provider Unauthorized Access

The vulnerability of the Storage Management Provider component in Windows operating systems is related to reading data beyond the buffer limits of memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Windows Storage Management Provider Unauthorized Access

The vulnerability of the Windows operating system’s Storage Management Provider component is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Windows Storage Management Provider Unauthorized Access

The vulnerability of the Windows operating system’s Storage Management Provider component is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Mozilla Firefox Use-After-Free

The vulnerability of the Mozilla Firefox browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Mozilla Firefox ESR Thunderbird Heap Buffer Overflow

The vulnerability of Mozilla Firefox ESR and the Thunderbird email client is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Trailer security vulnerabilities

Trailer is a tool by the individual developer Geoffroy Couprie. It is used to store types with associated buffers in contiguous memory. A security vulnerability exists in Trailer version 0.1.2 that stems from not properly handling zero-size allocations...

WebKitGTK WPE Buffer Overflow DoS

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by processing or loading specially created web...

Dell CMC Monitoring Code Execution

The vulnerability of monitoring and management tools for Dell Chassis Management Controllers CMC for Dell PowerEdge FX2 and Dell Chassis Management Controllers CMC for PowerEdge VRTX lies in the fact that operations are executed outside the buffer in memory. Exploiting this vulnerability allows a...

Adobe Illustrator Heap Buffer Overflow

The vulnerability of Adobe Illustrator’s graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to bypass ASLR protection and gain unauthorized access to protected information...

Mozilla Firefox Buffer Overflow DoS

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Substance 3D Sampler Heap Buffer Overflow

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of the current user...

PDFium Component Code Execution

The vulnerability of the PDFium component in the Google Chrome browser is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...