The vulnerability of the 3D model texturing program Adobe Substance 3D Painter, related to the occurrence of operations outside the buffer boundaries in memory, allows attackers to disclose protected information.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the jas_image_decode() function in the JPC library, which allows an attacker to execute arbitrary code.

The vulnerability of the jasimagedecode function in the JPC library for the JasPer set is related to the issue where the operation exits the buffer boundaries during the processing of ICC profiles. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the smc_encode_stream function in the libavcodec/smcenc.c component of the FFmpeg multimedia library allows a perpetrator to gain access to confidential data and also trigger a service denial.

The vulnerability of the smcencodestream function in the libavcodec/smcenc.c component of the FFmpeg multimedia library relates to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain access to confidential dat...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to a violation of the buffer’s initial limit, allowing an attacker to compromise data privacy and integrity.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to a violation of the buffer boundary. Exploiting these vulnerabilities allows an attacker to compromise data confidentiality and integrity remotely...

The vulnerability of the NetScreen parser—a traffic analysis tool for computer networks—allows a hacker to cause a service failure.

The vulnerability of the NetScreen file parser, a traffic analysis tool for computer networks, and the Wireshark analyzer is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability can allow attackers to cause service interruptions...

The vulnerability of the _bfd_stab_section_find_nearest_line function in the syms.c component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the bfdstabsectionfindnearestline function in the syss.c component of the GNU Binutils development environment is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to trigger a service failur...

The vulnerability of the gf_media_change_pl function on the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the gfmediachangepl function on the GPAC multimedia platform is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tif_jbig.c component of the JBIG1 data compression standard, which is used for working with JBIG images in the JBIG-KIT framework, allows a hacker to cause a service failure.

The vulnerability of the tifjbig.c component of the JBIG1 data compression standard, which is used for processing JBIG images, in the JBIG-KIT framework, relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the LZ4 data compression algorithm, which allows unauthorized access to confidential data by writing beyond the buffer boundaries, thereby enabling attackers to compromise the integrity of sensitive information and cause service interruptions.

The vulnerability of the lossless LZ4 data compression algorithm is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions...

The vulnerability of the ares_inet_net_pton() function in the C-ares asynchronous DNS request library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the aresinetnetpton function in the C-ares asynchronous DNS request library is related to a violation of the buffer boundary. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Advisory ROSA-SA-2023-2291

Software: gdb 8.2 OS: ROSA Virtualization 2.1 packageevrstring: gdb-8.2-19.rv3.src.rpm CVE-ID: CVE-2019-1010180 BDU-ID: 2019-03222 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the gdb module of the GDB debugger is related to an operation exceeding buffer boundaries in memory. Exploitation of the...

The vulnerability of SpaceClaim’s 3D modeling software allows a hacker to execute arbitrary code.

The vulnerability of the SpaceClaim 3D modeling software lies in the handling of buffer boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation in simulation models for systems and processes involves writing code beyond the buffer boundaries of memory, allowing attackers to execute arbitrary code with privileges of the current process.

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation lies in the writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code with privileges of the current process, using a specially crafted SPP file...

The vulnerability of Parasolid’s 3D geometric modeling tool, related to data writing to a buffer, allows a malicious actor to execute arbitrary code.

The vulnerability of Parasolid’s 3D geometric modeling tool lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute malicious code...

The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in the ability to write beyond the buffer boundaries of memory, allowing an attacker to execute arbitrary code.

The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in the handling of memory buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted AR format files...

PT-2023-6798 · Libx11 +10 · Libx11 +10

Name of the Vulnerable Software and Affected Versions: libX11 affected versions not specified Description: A vulnerability in the libX11 library is related to a boundary condition within the XkbReadKeySyms function, allowing a local user to trigger an out-of-bounds read error and read the content...

Oracle Linux 6 / 7 : openssl (ELSA-2016-3621)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3621 advisory. - fix CVE-2016-2177 - possible integer overflow - fix CVE-2016-2178 - non-constant time DSA operations - fix CVE-2016-2179 - further DoS issues in...

Vulnerability of the RleDecompress() function in the RDP client FreeRDP, allowing a hacker to trigger a service failure

The vulnerability of the RleDecompress function in the RDP client FreeRDP is related to the occurrence of operations outside the buffer boundaries in memory when processing the variable pbSrcBuffer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the OpenImageIO image processing library, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenImageIO image processing library lies in the escape of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through the use...

UNISOC Chipsets Buffer Error Vulnerability

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in UNISOC Chipsets due to a lack of boundary checking in the camera driver module, which may result in out-of-bounds reads...