9305 matches found
CVE-2020-23909
Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1...
AZL-44874 CVE-2020-23909 affecting package advancecomp 2.6-1
Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1...
UBUNTU-CVE-2020-23909
Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1...
Linux kernel 缓冲区错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 6.3.4, which stems from an out-of-bounds read by ksmbd in smb2findcontextvals when the namelen of...
PT-2023-25917 · Kofax · Kofax Power Pdf
Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicious file...
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to reading beyond the buffer in memory, allowing attackers to execute arbitrary code.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to reading beyond the buffer in memory. Exploiting this...
The vulnerabilities of the libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, and Jt3dReadPsr—programming environments for rendering 3D models by Luxion KeyShot—allow attackers to execute arbitrary code.
The vulnerability of the Luxion KeyShot 3D-modeling software libraries—CatiaV53dRead, CatiaV63dRead, Step3dRead, Ug3dReadPsr, and Jt3dReadPsr—is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code...
The vulnerabilities of microprogrammed logic controllers such as Modicon M580, Modicon M340, Modicon MC80, Modicon Momentum Ethernet, Modicon Quantum, Modicon Premium, and the programming software for these controllers—EcoStruxure Control Expert and EcoStruxure Process Expert—allow a hacker to trigger malfunctions during maintenance operations.
The vulnerability of microprogrammed logic controllers such as Modicon M580, Modicon M340, Modicon MC80, Modicon Momentum Ethernet, Modicon Quantum, Modicon Premium, and the programming software for these controllers—EcoStruxure Control Expert and EcoStruxure Process Expert—is related to reading...
The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information when analyzing a specially...
The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system allows a perpetrator to execute arbitrary code.
The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of the current process while analyzi...
The vulnerability of .NET components in the communication protocol library for connecting components of ASU TP Triangle MicroWorks DNP3 Source Code Library, a control platform for managing public distribution and transmission networks of Schneider Electric Saitel DR RTU, allows a intruder to cause a service failure.
The vulnerability of .NET components in the communication protocol library used for connecting components of ASU systems like Triangle MicroWorks DNP3 Source Code Library in Schneider Electric Saitel DR RTU control platforms lies in the fact that the operation results are stored outside of the...
The vulnerability of the IKE protocol implementation in real-time operating systems like Wind River VxWorks allows attackers to trigger service failures or gain access to confidential information.
The vulnerability of the IKE protocol implementation in real-time operating systems like Wind River VxWorks relates to reading beyond the boundary. Exploiting this vulnerability can allow a malicious actor to cause service failures or gain access to confidential information...
The vulnerability of the _bfd_elf_parse_gnu_properties function in the elf-properties.c library of the GNU Binutils development toolset allows a attacker to cause a service failure.
The vulnerability of the bfdelfparsegnuproperties function in the elf-properties.c library of the GNU Binutils development toolset is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the Freeimage graphic library, related to reading data beyond the buffer in memory, allows attackers to cause a service failure.
The vulnerability of the Freeimage graphic library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created JXR file...
The vulnerability of the Microsoft Visual Studio software allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Microsoft Visual Studio software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM
A vulnerability was found in OpenSSL. This security flaw occurs because the AES-XTS cipher decryption implementation for the 64-bit ARM platform contains an issue that could cause it to read past the input buffer, leading to a crash...
CVE-2023-35862
libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...
CVE-2023-32270
Access of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution...
UBUNTU-CVE-2023-35862
libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...
PT-2023-25351 · Libcoap · Libcoap
Name of the Vulnerable Software and Affected Versions: libcoap version 4.3.1 Description: The issue is related to a buffer over-read in the coap parse oscore conf mem function located at coap oscore.c. This function is part of the libcoap library. Recommendations: For libcoap version 4.3.1,...