CVE-2024-49533

CVE-2024-49533 affects Adobe Acrobat Reader family (DC/Classic/Continuous) versions including 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier. The issue is an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR. Exploitation require...

Adobe Illustrator < 28.7.3 / 29.0.0 < 29.1.0 Multiple Arbitrary code execution (APSB24-94) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 28.7.3, 29.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-94 advisory. - Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds write vulnerability th...

PT-2024-9490 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 29.0.0 through 28.7.2 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. This could allow an attacker to bypass mitigations such a...

PT-2024-9871 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID19.5, ID18.5.4 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass...

PT-2024-9950 · Adobe · Substance3D - Modeler

Name of the Vulnerable Software and Affected Versions: Substance3D - Modeler versions 1.14.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations...

PT-2024-33549 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 20.005.30710 through 24.005.20307 Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations suc...

Adobe InDesign < 19.5.1 / 19.0 < 20.0.0 Multiple Vulnerabilities (APSB24-97) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 19.5.1, 20.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-97 advisory. - InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by a Heap-based Buffer Overflow...

PT-2024-33548 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 20.005.30710 through 24.005.20307 Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations suc...

PT-2024-9853 · Adobe · Substance3D - Modeler

Name of the Vulnerable Software and Affected Versions: Substance3D - Modeler versions 1.14.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations...

PT-2024-9877 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID19.5, ID18.5.4 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe InDesign, which could lead to the disclosure of sensitive memory. An attacker could leverage this...

Adobe Substance 3D Stager Buffer Overflow Vulnerability (CNVD-2024-48211)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from a buffer overflow vulnerability that stems from susceptibility to an out-of-bounds read vulnerability that could lead to sensitive memory disclosure. An attacker can...

BIT-PHP-2024-11233 Single byte overread with convert.quoted-printable-decode filter

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas...

pam: libpam: Libpam vulnerable to read hashed password

A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input stdin. As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This fla...

PT-2024-9870 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID19.5, ID18.5.4 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to the disclosure of sensitive memory. This vulnerability could be exploited by an attacker to...

AZL-53462 CVE-2024-11233 affecting package php for versions less than 8.3.14-1

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas...

CVE-2024-11233

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas...

DEBIAN-CVE-2024-11233

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas...

CVE-2024-11233

CVE-2024-11233 affects PHP 8.1.x before 8.1.31, PHP 8.2.x before 8.2.26, and PHP 8.3.x before 8.3.14. The issue is a data overread caused by an error in the convert.quoted-printable-decode filter, which can lead to one-byte heap overread and, in some cases, crashes or disclosure of memory content...

CVE-2024-11233 Single byte overread with convert.quoted-printable-decode filter

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas...

CVE-2024-11233

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas...