The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system, related to operations occurring outside the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the execution of operations beyond the buffer in memory when processing CGM format files. Exploiting this vulnerability can allow attackers to execute arbitrary code...

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system, related to operations occurring outside the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the execution of operations beyond the buffer in memory when processing CGM format files. Exploiting this vulnerability can allow attackers to execute arbitrary code...

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system, related to pointer assignment errors, allows attackers to trigger a service failure.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization product lifecycle management system is related to errors in pointer assignment during the processing of CGM format files. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Kofax PowerPDF software, which is used for creating, converting, editing, and publishing PDF files, relates to the reading of data beyond the specified buffer. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the Kofax PowerPDF software for creating, converting, editing, and publishing PDF files lies in its ability to read data beyond the specified buffer. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created U3D file...

kernel: vmwgfx: reference count issue leads to use-after-free in surface handling

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user...

PT-2024-12916 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 Description: The issue allows a 3D model constructed to look like the enrolled user to authenticate via Face ID, due to inadequate anti-spoofing models. This has been addressed by improving...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 17 and iPadOS version 17, which stems from a 3D model that is built t...

PT-2024-1023 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.1.3 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigatio...

IrfanView Security Vulnerability

IrfanView is an image viewer by the individual developer Irfan Skiljan in Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A security vulnerability exists in IrfanView PlugIns B3D prior to version 4.56, which stems from a heap-based...

Tecno Camon Security Breach

The Tecno Camon is a Camon series smartphone from China-based Transocean. A security vulnerability exists in Tecno Camon X CA7 Gallery3d, which originates from a vulnerability that allows attackers to bypass the Gallary3D hidden image feature in TECNO Camon X. The vulnerability is caused due to t...

CVE-2023-47080

Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in tha...

Adobe Substance 3D Sampler 缓冲区错误漏洞

Adobe Substance 3D Sampler is a photogrammetry software from the American company Audobee Adobe. It is used to convert photo captures and scanned images into 3D textures and material assets. An out-of-bounds write vulnerability exists in Adobe Substance 3D Sampler 4.2.1 and earlier versions, whic...

CVE-2023-32616

A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. A specially crafted Javascript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An...

The vulnerability of the Xenon Ashlar-Vellum software for 3D modeling lies in its uncontrolled search element, which allows a hacker to execute arbitrary code.

The vulnerability of the Xenon Ashlar-Vellum software for 3D modeling is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a hacker to execute arbitrary code...

PT-2023-6973 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to insufficient input validation when processing FBX files, which can allow an attacker to execute arbitrary code. Recommendations: At the moment, there is no...

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to reading beyond the memory boundary, allowing attackers to disclose protected information.

The vulnerability of Siemens Solid Edge’s design and modeling tools is related to reading beyond the memory limit. Exploiting this vulnerability can allow attackers to disclose sensitive information using specially created STL files...

The vulnerability of the Substance 3D Stager software lies in the use of an uninitialized pointer, which allows a hacker to exploit the system and disclose protected information.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to disclose confidential information...

The vulnerability of the OctoPrint 3D-printer controller, related to errors in eliminating special elements in the template creation mechanism, allows a violator to execute arbitrary code.

The vulnerability of the OctoPrint 3D-printer controller is related to errors during the neutralization of special elements in the template creation mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Adobe Photoshop graphic editor, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Adobe Photoshop graphic editor is related to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created U3D file...

DEBIAN-CVE-2023-5633

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user...