CVE-2023-39483 PDF-XChange Editor J2K File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor J2K File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange PDF-XChange Editor. User interaction is required to exploit this vulnerability in that...

CVE-2023-38115 Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-38105 Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must...

CVE-2023-38081

Kofax Power PDF JP2 parsing vulnerability (CVE-2023-38081) allows out-of-bounds write, enabling remote code execution. The flaw exists in JP2 file parsing due to insufficient validation of input data, causing writes past allocated object bounds and code execution in the process context. Requires ...

CVE-2023-37352

CVE-2023-37352 affects Kofax Power PDF. The root cause is an out-of-bounds read in JPG file parsing due to insufficient validation, enabling information disclosure and potential arbitrary code execution in conjunction with other flaws. Exploitation requires user interaction (open a malicious file...

CVE-2023-37349 Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-37348

Kofax Power PDF contains an out-of-bounds write in the U3D file parser that can lead to remote code execution. The vulnerability stems from insufficient validation of user-supplied data during U3D parsing, allowing writes past the end of an allocated buffer and enabling code execution in the proc...

CVE-2023-34303

Ashlar-Vellum Cobalt is affected by an out-of-bounds read vulnerability in VC6 file parsing that can lead to remote code execution. The issue arises from missing validation of user-supplied data, allowing a read past the end of an allocated buffer. Exploitation requires user interaction (visiting...

CVE-2023-34291 Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a maliciou...

CVE-2023-34290

Ashlar-Vellum Cobalt contains an out-of-bounds write vulnerability in the 3DS file parsing path that can lead to remote code execution. The flaw arises from insufficient validation of user-supplied data, allowing a write past the end of an allocated buffer. Exploitation requires user interaction ...

CVE-2023-34291

Ashlar-Vellum Cobalt is affected by CVE-2023-34291 due to an out-of-bounds write in the parsing of X_B or X_T files caused by insufficient validation of user-supplied data. This can allow remote attackers to execute arbitrary code in the context of the current process when a target visits a malic...

CVE-2023-34269

CVE-2023-34269 : A vulnerability in Fatek Automation FvDesigner’s FPJ file parser allows an out‑of‑bounds write due to insufficient input validation, enabling arbitrary code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or openi...

CVE-2023-34264 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that t...

CVE-2023-32161 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2023-32160 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2023-32159 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2023-32133

CVE-2023-32133 covers a vulnerability in Sante DICOM Viewer Pro where the J2K image parsing can cause an out-of-bounds write, enabling remote code execution. The flaw occurs when parsing J2K data: crafted images can write past the end of an allocated buffer, allowing code execution in the process...

CVE-2023-27349 BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability

BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the...

CVE-2023-27344

CVE-2023-27344 affects PDF-XChange Editor. The vulnerability is in the PDF parsing code, where crafted PDF data can trigger a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). ...

CVE-2023-27340

PDF-XChange Editor is affected by a PNG file parsing out-of-bounds write vulnerability (CVE-2023-27340). The flaw occurs during PNG data parsing, where crafted PNG content can write past the end of an allocated buffer, enabling arbitrary code execution in the context of the attacker’s process. Ex...