CVE-2021-46563

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

The vulnerability of the ufshcd_eh_device_reset_handler function (ufshcd.c) in the Android operating system allows a hacker to execute arbitrary commands and gain access to information.

The vulnerability of the ufshcdehdeviceresethandler function ufshcd.c in the Android operating system’s kernel is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary commands and gain access to sensitive information...

PT-2022-3822 · Lua +5 · Lua +5

Name of the Vulnerable Software and Affected Versions: Lua versions 5.4.0 through 5.4.4 Description: The issue is related to a heap-based buffer over-read in the singlevar function in lparser.c of Lua. This might affect systems that compile untrusted Lua code, potentially allowing a remote attack...

OESA-2022-1526 python-pillow security update

Python image processing library. Security Fixes: pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.CVE-2022-22816 PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec...

The vulnerability of the iOS, iPadOS, watchOS, tvOS, macOS, and Mac OS X operating systems relates to reading data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the iOS, iPadOS, watchOS, tvOS, macOS, and Mac OS X operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-0521

Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2...

UBUNTU-CVE-2022-0521

Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2...

The vulnerability of the Adobe InCopy text creation and editing software lies in the reading beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to reading beyond the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 lies in the reading of data beyond the buffer in memory. Exploiting thi...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to reading beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to reading data beyond the buffer in memory. Exploiting this...

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit, related to reading beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

UBUNTU-CVE-2021-46671

options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client...

The vulnerability of the path_getbbox function in the Python Pillow image processing library, which involves reading beyond the buffer boundary, allows an attacker to access confidential information.

The vulnerability of the pathgetbbox function in the Python Pillow image processing library involves reading data beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain access to confidential information by sending a specially crafted file...

The vulnerability of the ImageIO component in iOS, iPadOS, tvOS, watchOS, and macOS allows attackers to gain access to confidential information.

The vulnerability of the ImageIO component in iOS, iPadOS, tvOS, watchOS, and macOS relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to access confidential information using a specially created malicious ASTC file...

The vulnerability of the FontParser component in operating systems such as iPadOS, watchOS, iOS, tvOS, and Mac OS allows attackers to disclose protected information.

The vulnerability of the FontParser component in iPadOS, watchOS, iOS, tvOS, and Mac OS operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Windows operating systems, enabling an attacker to gain unauthorized access to protected information.

The vulnerability of the driver for enabling Storage Spaces on Windows operating systems relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Mageia: Security Advisory (MGASA-2017-0405)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2016-0257)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0077)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory. This allows attackers to exploit their privileges and gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected information...