ROS-2-1397

2.1397 Multiple vulnerabilities in libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

The vulnerability of the Adobe Photoshop graphic editor lies in the ability to write beyond the buffer boundaries in memory, allowing an attacker to perform arbitrary…

The vulnerability of the Adobe Photoshop graphic editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2021-6441 · Oracle +1 · Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 7.4.34 and prior MySQL Cluster versions 7.5.24 and prior MySQL Cluster versions 7.6.20 and prior MySQL Cluster versions 8.0.27 and prior Description: The issue allows a high-privileged attacker with access to the physic...

D-Link DIR-615 安全漏洞

The D-Link DIR-615 is a wireless router from D-Link, a Taiwan-based company. The security vulnerability in the D-Link DIR-615 stems from a network system or product that does not properly validate data boundaries when performing operations on memory, resulting in incorrect read and write operatio...

多款Qualcomm产品缓冲区错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are often manufactured on the surface of semiconductor wafers. A buffer error vulnerability exists in multiple Qualcomm products, which stems...

PT-2021-6424 · Oracle +1 · Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 7.4.34 and prior MySQL Cluster versions 7.5.24 and prior MySQL Cluster versions 7.6.20 and prior MySQL Cluster versions 8.0.27 and prior Description: The issue allows a high-privileged attacker with access to the physic...

NVIDIA Windows GPU Display Driver 缓冲区错误漏洞

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA Corporation for the Windows platform. The NVIDIA Windows GPU Display Driver suffers from a buffer error vulnerability that originates from a failure to properly handle memory boundaries at the kernel...

MikroTik RouterOS 缓冲区错误漏洞

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. A buffer error vulnerability exists in Mikrotik RouterOs, which stems from the product's /nova/bin/diskd process...

Tor 缓冲区错误漏洞

Tor is a network of virtual tunnels. It allows individuals and groups to improve their privacy and security on the Internet. A buffer error vulnerability exists in Tor. The vulnerability arises from a networked system or product performing operations in memory without properly validating data...

hivex 缓冲区错误漏洞

hivex is a software application. Self-contained library for reading and writing Windows. hivex suffers from a buffer error vulnerability that originates when a network system or product performs an operation in memory without properly validating data boundaries, resulting in an incorrect read or...

The vulnerability of the visual analysis tool IBM i2 Analyst’s Notebook lies in the fact that when an operation is performed outside the buffer in memory, it allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the visual analysis tool IBM i2 Analyst’s Notebook relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure or execute arbitrary code using a specially created file with...

The vulnerability of the contrib/gdevdj9.c component of the software for document processing, conversion, and generation allows a perpetrator to cause service failures.

The vulnerability of the contrib/gdevdj9.c component of the software suite for processing, transforming, and generating Ghostscript documents is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the SPNEGO DNS-server BIND implementation allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the SPNEGO DNS-server BIND implementation lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service failures or execute arbitrary code...

The vulnerability of the libnvomx driver library from NVIDIA Tegra OpenMax allows attackers to induce service failures or gain increased privileges.

The vulnerability of the NVIDIA Tegra OpenMax driver library libnvomx relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause system failures or gain increased privileges...

Intel Graphics Driver Buffer Error Vulnerability

Intel Graphics Drivers is an integrated graphics driver from Intel Corporation USA. A buffer error vulnerability exists in Intel Graphics Driver that originates when a networked system or product performs an operation in memory without properly validating data boundaries, resulting in an incorrec...

The vulnerability of the `qtdemux_parse_samples` function (gst/isomp4/qtdemux.c) in the Gstreamer multimedia framework’s Gst-plugins-good plugin allows a hacker to trigger a service failure.

The vulnerability of the qtdemuxparsesamples function located in gst/isomp4/qtdemux.c in the gst-plugins-good plugin for the Gstreamer multimedia framework is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor ...

The vulnerability of the gst_avi_demux_parse_ncdt function (gst/avi/gstavidemux.c) in the Gstreamer multimedia framework’s gst-plugins-good plugin. This vulnerability allows an attacker to cause a service failure.

The vulnerability of the gstavidemuxparsencdt function gst/avi/gstavidemux.c in the gst-plugins-good plugin for the Gstreamer multimedia framework is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the qtdemux_tag_add_str_full function (gst/isomp4/qtdemux.c) in the gst-plugins-good plugin for the Gstreamer multimedia framework allows a attacker to trigger a service failure.

The vulnerability of the qtdemuxtagaddstrfull function gst/isomp4/qtdemux.c in the Gst-plugins-good plugin for the Gstreamer multimedia framework is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause...

Pelco Digital Sentry Server Buffer Error Vulnerability

A buffer error vulnerability exists in Pelco Digital Sentry Server that originates when a network system or product performs an operation in memory without properly validating the data boundaries, resulting in an incorrect read or write operation being performed to an associated other memory...

Teradici PCoIP soft client buffer error vulnerability

A buffer error vulnerability exists in Teradici PCoIP soft client that originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting in an incorrect read or write operation being performed to an associated other memory location...