gif2apng 缓冲区错误漏洞

gif2apng is a simple program that converts animations from GIF to APNG format. gif2apng suffers from a buffer overflow vulnerability that could be exploited by an attacker to write data outside the allocated buffer...

The vulnerability of the kernel of operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows attackers to gain increased privileges.

The vulnerability in the kernel of operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS relates to operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the gst_aac_parse_sink_setcaps function (gst/audioparsers/gstaacparse.c) in the gst-plugins-good plugin for the Gstreamer multimedia framework allows a malicious actor to cause a service failure.

The vulnerability of the gstaacparsesinksetcaps function gst/audioparsers/gstaacparse.c in the gst-plugins-good plugin for the Gstreamer multimedia framework is related to the execution of operations outside of the buffer memory. Exploiting this vulnerability could allow a remote attacker to caus...

The vulnerability of the Intel Active Management Technology implementation arises from the possibility of writing operations outside of the buffer in memory, allowing an attacker to exploit their privileges.

The vulnerability of the Intel Active Management Technology implementation is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Microsoft Exchange Server mail server arises from a transaction that occurs outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Exchange Server arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Microsoft Outlook email client arises from an operation that occurs outside the buffer in memory, allowing an attacker to disclose protected information.

The vulnerability of the Microsoft Outlook email client arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information by sending an email containing a linked file...

The vulnerability of the Microsoft Outlook email client, as well as Microsoft Office and Microsoft 365 applications, allows attackers to gain control over programs, access data for viewing, modification, or deletion, and create new accounts with full user rights.

The vulnerability of the Microsoft Outlook email client, as well as Microsoft Office and Microsoft 365 applications, stems from an operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain privileges to install...

The vulnerability of the exif_process_IFD_in_MAKERNOTE function in the EXIF interpreter for the PHP programming language allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the exifprocessIFDinMAKERNOTE function in the EXIF interpreter for the PHP programming language is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2017-18688

An issue was discovered on Samsung mobile devices with L5.1, M6.0, and N7.0 software. There is an information disclosure of memory locations outside a buffer via /dev/dsmctrldev. The Samsung ID is SVE-2016-7340 January 2017...

The vulnerability in the built-in software of Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards arises from the execution of operations outside the buffer in memory, allowing attackers to exploit their privileges.

The vulnerability in the built-in software of Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

Vulnerability of the rwsem_down_write_slowpath function (kernel/locking/rwsem.c) in the Linux operating system’s kernel, which allows an attacker to disclose protected information or cause service failure

The vulnerability of the rwsemdownwriteslowpath function in the Linux kernel’s locking/rwsem.c file relates to operations that occur outside of the buffer memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...

The vulnerability of the Trusted Execution Technology (TXT) implementation in Intel processors allows attackers to enhance their privileges.

The vulnerability of the Trusted Execution Technology TXT implementation in Intel processors lies in the fact that the operation’s output is stored outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of WebGL buffer data in Firefox browsers (Firefox ESR), Thunderbird email client, arises from the possibility of operations occurring outside the buffer in memory. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of WebGL buffer data in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to buffer overflows in certain graphics drivers. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servic...

The vulnerability of the Microsoft Project project management software and the Office 365 suite, related to the execution of operations outside the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Project project management software and the Office 365 suite arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...

The vulnerability of the Qualcomm Trusted Execution Environment component in the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Qualcomm Trusted Execution Environment in the Android operating system arises from an operation that occurs outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the QURTK_write() function in Qualcomm’s Android operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the QURTKwrite function in Qualcomm’s Android operating system arises from an operation that occurs outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the Qualcomm GPT listener component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Qualcomm GPT listener component in the Android operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the zi_short function in the Info-ZIP Unzip file archiver’s zipinfo.c file allows a hacker to trigger a service failure.

The vulnerability of the zishort function in the Info-ZIP Unzip file archiver exists because the result of the operation is stored outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures through vectors related to the compression method...

The vulnerability of the Sample App component of the Android operating system from the CAF repository allows a perpetrator to gain unauthorized access to protected memory.

The vulnerability of the Sample App component of the Android operating system in the CAF repository arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected memory...

The vulnerability of the Shockwave Player software platform, which allows a violator to execute arbitrary code

The vulnerability of the Shockwave Player software arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code memory corruption...