CVE-2024-47615

GStreamer has a concrete vulnerability CVE-2024-47615: an OOB write in vorbis_parse.c within gst_parse_vorbis_setup_packet where a size read from input is not validated, allowing the write to exceed pad->vorbis_mode_sizes (256) by as much as ~380 bytes and potentially corrupt adjacent memory. ...

CVE-2024-47615 GHSL-2024-117: GStreamer has an out-of-bounds write in Ogg demuxer

GStreamer is a library for constructing graphs of media-handling components. An OOB-Write has been detected in the function gstparsevorbissetuppacket within vorbisparse.c. The integer size is read from the input file without proper validation. As a result, size can exceed the fixed size of the...

Vulnerability fixed in Adobe Photoshop

Adobe has fixed a vulnerability in Photoshop Desktop Versions 26.0 and earlier. The vulnerability is in how Photoshop handles memory management, specifically a Use After Free error. This vulnerability allows an attacker to execute arbitrary code, but requires user interaction such as opening a...

openSUSE 15 Security Update : qt6-webengine (openSUSE-SU-2024:0402-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0402-1 advisory. - CVE-2024-11403: Fixed out of bounds memory read/write in libjxl boo1233764 Tenable has extracted the preceding description block directly from the SUSE...

OPENSUSE-SU-2024:0402-1 Security update for qt6-webengine

This update for qt6-webengine fixes the following issues: - CVE-2024-11403: Fixed out of bounds memory read/write in libjxl boo1233764...

CVE-2024-12130

CVE-2024-12130 is a Rockwell Automation Arena (Arena Simulation) vulnerability described as an out-of-bounds read during parsing of DOE files, enabling arbitrary code execution when a user opens a malicious DOE file or visits a crafted resource. Documents consistently reference Arena/ Arena Simul...

CVE-2024-12130 Rockwell Automation Arena® Out of Bounds Read Vulnerability

An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to read beyond the boundaries of an allocated memory. If exploited, a threat actor could leverage this vulnerability to execute...

The vulnerability of the sata_fsl component in the Linux operating system allows a hacker to gain elevated privileges within the system.

The vulnerability of the satafsl component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created PSM file...

The vulnerability of Adobe Illustrator’s graphic editor, related to reading data beyond the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created PDF file...

The vulnerability of Adobe Illustrator’s graphic editor, related to reading data beyond the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

The vulnerability of Adobe Illustrator’s graphic editor, related to reading data beyond the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

The vulnerability of the USB Video Class Driver (UVC) driver (usbvideo.sys) on Windows operating systems, which allows attackers to escalate their privileges

The vulnerability of the USB Video Class Driver UVC driver usbvideo.sys for Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Microsoft SQL Server database management system, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft SQL Server database management system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the AcroForm Handler component in the PDF Foxit Reader (formerly Foxit Reader) and Foxit PDF Editor (formerly Foxit PhantomPDF) software for viewing electronic documents affects the memory management after it is released. This allows an attacker to execute arbitrary code.

The vulnerability of the AcroForm Handler component in the PDF Foxit Reader software formerly Foxit Reader and the Foxit PDF Editor software for editing PDF files is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the “set Diagnostics_Entry” function in D-Link DSL-3782 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the “set DiagnosticsEntry” function in D-Link DSL-3782 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the qcom component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the qcom component in the Linux operating system’s kernel is related to errors in reading beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the peimage module in the Grub2 operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the peimage module in the Grub2 operating system relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...