The vulnerability of the put_qpel_0_0_fallback_16 function (fallback-motion.cc) in the implementation of the h.265 Libde265 video codec allows a perpetrator to trigger a service failure.

The vulnerability of the putqpel00fallback16 function in fallback-motion.cc in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to trigger a service failure using a specially created file...

The vulnerability of the AppleVA component in the macOS operating system allows a hacker to execute arbitrary code.

The vulnerability of the AppleVA component in the macOS operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

AlmaLinux 8 : mysql:8.0 (ALSA-2024:0894)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0894 advisory. mysql: InnoDB unspecified vulnerability CPU Apr 2023 CVE-2023-21911 mysql: Server: DDL unspecified vulnerability CPU Apr 2023 CVE-2023-21919,...

PT-2024-1862 · Irfan Skiljan · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

Moderate: Red Hat Security Advisory: mysql:8.0 security update

An update for the mysql:8.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

zstd: mysql: buffer overrun in util.c

A vulnerability was found in zstd. This flaw allows an attacker to supply an empty string as an argument to the command line tool to cause a buffer overrun...

The vulnerability of the 3D model texturing program Adobe Substance 3D Painter, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the 3D model texturing program Adobe Substance 3D Painter, related to the occurrence of operations outside the buffer boundaries in memory, allows attackers to exploit the protected information.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to disclose protected information...

RHEL 8 : mysql:8.0 (RHSA-2024:0894)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0894 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and...

The vulnerability of the PhysmemCreateNewDmaBufBackedPMR function in the ChromeOS operating system allows a hacker to execute arbitrary code and enhance their privileges.

The vulnerability of the PhysmemCreateNewDmaBufBackedPMR function in the ChromeOS operating system is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code and increase their privileges...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve an exploit where operations are performed outside the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the execution of operations beyond the buffer in memory. Exploiting these vulnerabilities can allow...

The vulnerability of the tiffrasterscanlinesize64() function in the LibTIFF library, which allows a hacker to cause a service failure

The vulnerability of the tiffrasterscanlinesize64 function in the LibTIFF library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

PT-2024-1963 · Siemens · Simcenter Femap

Name of the Vulnerable Software and Affected Versions: Simcenter Femap versions prior to V2401.0000 Description: A vulnerability has been identified in Simcenter Femap that involves an out of bounds write past the end of an allocated buffer while parsing a specially crafted Catia MODEL file. This...

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models lies in the ability to write data beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the CAMX driver for the Chrome OS operating system allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the CAMX driver for the Chrome OS operating system is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary code...

CentOS 8 : systemd (CESA-2023:0100)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:0100 advisory. - An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific values for time and accuracy...

The vulnerability of the soapcgi_main function in D-Link DIR-815 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the soapcgimain function in D-Link DIR-815 router microprogramming software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GLSA-202402-08 : OpenSSL: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202402-08 OpenSSL: Multiple Vulnerabilities - OpenSSL supports creating a custom cipher via the legacy EVPCIPHERmethnew function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors ar...

OESA-2024-1109 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel before 6.5.9, there is a NULL pointer dereference in sendacknowledge in net/nfc/nci/spi.c.CVE-2023-46343 In the Linux kernel before 6.4.12, amdgpucswaitallfences in drivers/gpu/drm/amd/amdgpu/amdgpucs.c has a...

CLSA-2024-1706700142 php: Fix of 8 CVEs

CVE-2021-21702: Fix null pointer crash because of malformed SOAP server response - CVE-2021-21703: Fix error in php fpm shared memory organization leading to privilage escalation - CVE-2022-31625: Fix freeing of uninitialized memory leading to RCE - CVE-2022-31626: Fix buffer overflow in mysqlnd...