PT-2024-33542 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 10.0.1 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds write error in the dvb-frontends/rtl2830 driver...

Siemens Tecnomatix Plant Simulation 缓冲区错误漏洞

Tecnomatix Plant Simulation allows the modeling, simulation, exploration and optimization of logistics systems and their processes. These models allow material flow, resource utilization and logistics analysis of all manufacturing plans from global production facilities to local plants and specif...

PT-2024-31589 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 4.1.0 Description: A local attacker can cause a Denial of Service DOS through an out-of-bounds write. This issue allows a local attacker to perform actions that can lead to a denial of service. Recommendations: F...

Google Chrome integer overflow vulnerability (CNVD-2024-39740)

Google Chrome is a web browser from Google, an American company. An integer overflow vulnerability exists in Google Chrome versions prior to 129.0.6668.70, which can be exploited by remote attackers to perform out-of-bounds memory writes via specially crafted HTML pages...

PDF-XChange Editor PPM File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor is a PDF editor software and PDF reader. PDF-XChange Editor PPM file parsing has an out-of-bounds write remote code execution vulnerability that can be exploited by an attacker to execute code in the context of the current process...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to memory-related write operations. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

LLama cpp python binding < 0.2.88 Arbitrary Write Vulnerability

The version of llama.cpp installed on the remote host is prior to 0.2.88. It is, therefore, affected by an arbitrary write vulnerability. This vulnerability was combined with another arbitrary address read vulnerability to achieve RCE, demonstrating the significant impact of the vulnerability. No...

CVE-2024-45108

Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-39378

Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2024-6187 · Adobe · After Effects

Name of the Vulnerable Software and Affected Versions: After Effects versions 23.6.6, 24.5 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires us...

[SECURITY] [DLA 3884-1] cacti security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3884-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès September 09, 2024 https://wiki.debian.org/LTS -...

CVE-2024-42416 Multiple issues in ctl(4) CAM Target Layer

The ctlreportsupportedopcodes function did not sufficiently validate a field provided by userspace, allowing an arbitrary write to a limited amount of kernel help memory. Malicious software running in a guest VM that exposes virtioscsi can exploit the vulnerabilities to achieve code execution on...

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from a lack of boundary checking in the vdec component, which could result in an out-of-bounds write...

Microsoft Exchange ProxyLogon Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework begin auxiliary class class MetasploitModule 'Microsoft Exchange ProxyLogon Scanner', 'Description' = %q This module scan for a vulnerability on Microsoft Exchange Serve...

CVE-2024-39394

Adobe InDesign Desktop (Windows/macOS) versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability (CVE-2024-39394) that could enable arbitrary code execution in the current user context. Exploitation requires the user to open a malicious file. A security update is ...

CVE-2024-34133

Adobe Illustrator CVE-2024-34133 is an out-of-bounds write vulnerability affecting Illustrator versions 28.5, 27.9.4 and earlier, enabling arbitrary code execution in the context of the current user. Exploitation requires the victim to open a malicious file (user interaction). This CVE is listed ...

CVE-2024-41864 Adobe Substance 3D Designer ICO Parsing Out-Of-Bounds Write Vulnerability

Substance3D - Designer versions 13.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. An out-of-bounds write vulnerability exists in Adobe Dimension version 3.4.11 and earlier versions, which can be exploited by an attacker to execute arbitrary code in the context o...