CVE-2024-47445

Affected software: Adobe After Effects (Windows/macOS).Vulnerability: Out-of-bounds read in After Effects versions up to 24.6.2 (and 23.6.9) per CVE-2024-47445; attacker could disclose memory contents and bypass ASLR.Root cause/tech: Out-of-bounds read in the affected code path; exploitation requ...

CVE-2024-47446

CVE-2024-47446 – Adobe After Effects : Affected are After Effects 23.6.9, 24.6.2 and earlier. The issue is an out-of-bounds read that could leak memory and bypass mitigations such as ASLR. Exploitation requires the user to open a malicious file (user interaction). The vulnerability is documented ...

CVE-2024-47446 After Effects | Out-of-bounds Read (CWE-125)

After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-49527

Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

CVE-2024-49527 Animate | Out-of-bounds Read (CWE-125)

Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

CVE-2024-49527

Adobe Animate CVE-2024-49527 is an out-of-bounds read in versions 23.0.7, 24.0.4 and earlier that can disclose memory and bypass ASLR. Exploitation requires a user to open a malicious file; attack vector is local. Remediation per APSB24-76 is updating to 23.0.8 or 24.0.5 (or newer).

net: ethernet: lantiq_etop: fix memory disclosure

...

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability previously existed in Ivanti Avalanche version 6.4.6, which stemmed from the inclusion of ...

PT-2024-9705 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID18.5.3, ID19.5 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe InDesign, which could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabili...

PT-2024-9701 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID18.5.3, ID19.5 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass...

PT-2024-8193 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 28.7.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such...

Adobe Illustrator < 28.7.2 Multiple Vulnerabilities (APSB24-87)

The version of Adobe Illustrator installed on the remote Windows host is prior to 28.7.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-87 advisory. - Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could resul...

Adobe Illustrator < 28.7.2 Multiple Vulnerabilities (APSB24-87) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 28.7.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-87 advisory. - Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result ...

PT-2024-8042 · Adobe · Audition

Name of the Vulnerable Software and Affected Versions: Adobe Audition versions 23.6.9, 24.4.6 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations...

PT-2024-33544 · Adobe · Animate

Name of the Vulnerable Software and Affected Versions: Animate versions 23.0.7, 24.0.4 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

PostgreSQL Memory disclosure in aggregate function calls (CVE-2023-5868)

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

CVE-2024-44240

The issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Processing a maliciously crafted font may result in the disclosure of...

CVE-2024-44240

The issue was addressed with improved checks. This issue is fixed in tvOS 18.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, visionOS 2.1. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2024-44302

The issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Processing a maliciously crafted font may result in the disclosure of...

CVE-2024-44302

The issue was addressed with improved checks. This issue is fixed in tvOS 18.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, visionOS 2.1. Processing a maliciously crafted font may result in the disclosure of process memory...