CVE-2021-31438

CVE-2021-31438 affects Foxit Studio Photo 3.6.6.931. The vulnerability resides in PSP file handling where the length of user-supplied data is not properly validated before being copied into a fixed-length stack buffer, resulting in a stack-based buffer overflow. This can allow remote attackers to...

CVE-2021-31437

Foxit Studio Photo 3.6.6.931 contains an out-of-bounds write in JP2 file parsing due to insufficient input validation, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The issue is documented by ZDI (ZDI-21-480). No re...

CVE-2021-31438

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31437

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31436

CVE-2021-31436 affects Foxit Studio Photo 3.6.6.931. The issue resides in the SGI file handling where the length of user-supplied data is not properly validated before copying to a heap-based buffer, causing a heap-based buffer overflow. This leads to remote code execution in the context of the c...

CVE-2021-31435

Foxit Studio Photo 3.6.6.931 is affected by a CMP file parsing vulnerability caused by uninitialized memory access, enabling remote code execution. Exploitation requires user interaction (e.g., visiting a malicious page or opening a malicious file). The issue is documented across multiple sources...

CVE-2021-31435

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31436

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31434

Foxit Studio Photo 3.6.6.931 is affected by CVE-2021-31434. The issue is an out-of-bounds write in the JPM file parsing path caused by insufficient validation of user-supplied data, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visit...

CVE-2021-31434

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31433

Foxit Studio Photo 3.6.6.931 is affected by CVE-2021-31433. The root cause is improper validation during ARW file parsing, causing a write past the end of an allocated data structure. This enables remote code execution in the context of the current process, with user interaction required (target ...

CVE-2021-31432

The CVE-2021-31432 issue affects Parallels Desktop 15.1.5-47309 and is tied to the IDE virtual device. The root cause is improper validation of user-supplied data that leads to an out-of-bounds read (read past the end of an allocated buffer). This information disclosure vulnerability requires a l...

CVE-2021-31431

The CVE-2021-31431 entry affects Parallels Desktop 15.1.5-47309, specifically the IDE virtual device. The vulnerability stems from improper validation of user-supplied data in the IDE virtual device, causing an information disclosure via a read past the end of an allocated buffer. An attacker mus...

CVE-2021-31431

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

CVE-2021-31430

CVE-2021-31430 affects Parallels Desktop 15.1.5-47309, with the IDE virtual device vulnerable to an out-of-bounds read that can disclose sensitive information. The flaw arises from improper validation of user-supplied data, enabling a local attacker with high privileges on the target guest to rea...

CVE-2021-31430

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

CVE-2021-31429

Parallels Desktop 15.1.5-47309 is affected. The flaw is in the IDE virtual device where the length of user-supplied data is not properly validated before being copied to a fixed-length heap-based buffer, causing a heap-based buffer overflow. This enables local attackers who already have high-priv...

CVE-2021-31427

CVE-2021-31427 affects Parallels Desktop 15.1.5-47309. The vulnerability lies in the Open Tools Gate component, due to lack of proper locking when performing operations on an object, enabling local disclosure of sensitive information. An attacker must run low-privileged code on the guest and coul...

CVE-2021-31425

CVE-2021-31425 affects Parallels Desktop 16.1.2-49151, with the flaw in the Parallels Tools component caused by improper validation of user-supplied data leading to an integer overflow during buffer allocation. This local privilege escalation could allow an attacker to execute arbitrary code in t...

CVE-2021-31424

CVE-2021-31424 concerns Parallels Desktop 15.1.5-47309. The flaw is in the Open Tools Gate component, caused by improper validation of the length of user-supplied data before copying into a fixed-length heap buffer. This enables local privilege escalation to execute arbitrary code in the hypervis...