10184 matches found
OESA-2025-1288 compat-openssl11 security update
OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation...
Adobe InDesign Automation Buffer Overflow RCE
The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...
xslt/txNodeSorter Component Information Disclosure
The vulnerability of the xslt/txNodeSorter component in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, is related to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to influence the...
Mozilla Firefox ESR Heap Buffer Overflow DoS
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, is related to reading data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Cobalt Ashlar-Vellum Heap Overflow RCE
The vulnerability of the Cobalt Ashlar-Vellum software for parametric automated design and 3D modeling lies in the ability to read data beyond the acceptable range in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of the current process...
Substance 3D Sampler Heap Buffer Overflow
The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of the current user...
USB-Audio Component Kernel DoS
The vulnerability of the USB-Audio component in the Linux operating system’s kernel is related to errors in reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-24992
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally...
Intel QuickAssist Technology Buffer Overflow
The vulnerability of the Intel QuickAssist Technology QAT driver package relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
TP-LINK TL-WR841ND Router Buffer Overflow
The vulnerability of TP-LINK’s TL-WR841ND router’s microprogramming software lies in the fact that the operation is performed outside the buffer in memory when processing the ssid parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending specially craft...
CVE-2024-12975
A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface...
CVE-2024-12975
A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface...
CVE-2024-12975
The CVE-2024-12975 entry concerns a buffer overread in the Silicon Labs CPC application when operating in full duplex SPI after receiving an invalid SPI packet. The provided connected sources indicate the issue arises in the CPC/SiLabs stack and has a low CVSS base score (1.0, LOW) with physical ...
CVE-2024-12975 Silicon Labs CPC can leak information in full duplex SPI
A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface...
CVE-2024-12975 Silicon Labs CPC can leak information in full duplex SPI
A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface...
CVE-2024-12975 Silicon Labs CPC can leak information in full duplex SPI
A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface...
PT-2025-10098
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A buffer overread issue can occur in the application when it operates in full duplex SPI and receives an invalid packet over the SPI interface. Recommendations At the moment, there is no...
Simplicity SDK security vulnerabilities
Simplicity SDK is a Simplicity software development kit from Silicon Open Source. A security vulnerability exists in Simplicity SDK that originates from a buffer over-read that occurs when an invalid packet is received...
Oracle Solaris Privilege Escalation
The vulnerability of the Oracle Solaris operating system’s file system is related to reading data beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to gain privileged access to infrastructure resources or cause service failures...
CLSA-2025-1741286348 Fix of 5 CVEs
SECURITY UPDATE: buffer over-read in xmlHTMLPrintFileContext - debian/patches/CVE-2024-34459.patch: Fix buffer overread with xmllint --htmlout by adding a missing bounds check - CVE-2024-34459 SECURITY UPDATE: use-after-free vulnerability in xinclude.c - debian/patches/CVE-2022-49043.patch: Fix...