PT-2021-4616 · Leptonica +1 · Leptonica +1

Name of the Vulnerable Software and Affected Versions: Leptonica versions prior to 1.80.0 Description: The issue is related to a heap-based buffer over-read in the rasteropGeneralLow component of the Leptonica image processing library. This can be exploited by a remote attacker to cause a denial ...

PT-2021-4617 · Leptonica +1 · Leptonica +1

Name of the Vulnerable Software and Affected Versions: Leptonica versions prior to 1.80.0 Description: The issue is related to a heap-based buffer over-read in the findNextBorderPixel function in ccbord.c. This can potentially allow a remote attacker to cause a denial of service. Recommendations:...

Dan Bloomberg Leptonica 缓冲区错误漏洞

Dan Bloomberg Leptonica is a Dan Bloomberg open source application. It provides basic image processing and image analysis operations. A security vulnerability exists in Leptonica before 1.80.0, which stems from adaptmap reg.c and adaptmap.c and results in a heap-based buffer overread...

OESA-2021-1070 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. Security Fixes: In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file...

OESA-2021-1060 OpenEXR security update

OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fixes: In OpenEXR 2.2.0, an invalid read of size 1 in the refill function in ImfFastHuf.cpp could cause the application to crash.CVE-2017-9114 ...

Huawei EulerOS: Security Advisory for openssl098e (EulerOS-SA-2021-1506)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.6 : openssl098e (EulerOS-SA-2021-1506)

According to the version of the openssl098e package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result ...

The vulnerabilities of the 3D model rendering software programs Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, and Luxion KeyVR allow attackers to execute arbitrary code.

The vulnerability of the 3D model rendering software programs Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, and Luxion KeyVR lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code during the...

Qualcomm 封闭源组件安全漏洞

A security vulnerability exists in the Qualcomm Closed Source component that stems from the absence of a NULL termination check on the SDP, where a buffer over-read may occur when parsing received SDP values...

Qualcomm 封闭源组件安全漏洞

The Qualcomm component is a component of Qualcomm Incorporated Qualcom. Intrinsic components that provide Qualcomm devices A security vulnerability exists in the Qualcomm Closed Source Component that stems from improper length checking and buffer over-reading when processing maximum length MT SMS...

The vulnerability of Adobe Audition for Windows and macOS, related to reading data beyond the buffer in memory, allows a hacker to gain unauthorized access to protected information.

The vulnerability of Adobe Audition for Windows and macOS relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Adobe Premiere Rush’s video editing software, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Premiere Rush’s video editing software relates to reading data beyond the buffer limit in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of Adobe Premiere Pro’s nonlinear video editing software, related to reading beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Premiere Pro’s nonlinear video editing software is related to reading data beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

OESA-2021-1038 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

CVE-2020-28394

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing of RAS files. This could result in a memory access past the end of an allocated buffer. An attacker...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

The vulnerability of the professional video editing software Adobe Premiere Pro, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

OESA-2021-1034 djvulibre security update

DjVu is a set of compression technologies, a file format, and a software platform for the deliveryover the Web of digital documents, scanned documents, and high resolution images.DjVu documents download and display extremely quickly, and look exactly the same on all platforms with no compatibilit...

OESA-2021-1024 p11-kit security update

Provides a way to load and enumerate PKCS11 modules. Provides a standard configuration setup for installing PKCS11 modules in such a way that they're discoverable. Also solves problems with coordinating the use of PKCS11 by different components or libraries living in the same process.\r\n\r\n...