Advantech Adam-3600 buffer error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer error vulnerability. This vulnerability stems from issues with heap memory reading, which may allow attackers to disclose sensitive data...

Eclipse ThreadX GUIX buffer error vulnerability

Eclipse ThreadX GUIX versions 6.5.1.202602a and earlier contain a buffer error vulnerability. This vulnerability arises because the PNG block reader fails to validate the order of blocks; it allows reading the IHDR after the IDAT and overwriting the image dimensions. As a result, when performing...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 have a buffer error vulnerability. This vulnerability stems from damage to the Toolbar memory, which may allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

Eclipse ThreadX GUIX buffer error vulnerability

Eclipse ThreadX GUIX versions 6.5.1.202602a and earlier contain a buffer error vulnerability. This vulnerability arises because gxmultilinetextviewdisplayinfoget reads the last byte of the text buffer when the string ends with a carriage return character \r. This may lead to an out-of-bounds read...

Eclipse ThreadX - USBX buffer error vulnerability

Eclipse ThreadX – Versions 6.5.1.202602 and earlier contain a buffer error vulnerability. This vulnerability arises when a malicious USB MTP/PTP device causes an out-of-bounds read of heap buffers during normal object enumeration by the USBX host. It may lead to the disclosure of adjacent heap...

Eclipse ThreadX - USBX buffer error vulnerability

Eclipse ThreadX – Versions 6.5.1.202602 and earlier contain a buffer error vulnerability. This vulnerability arises because the USBX host fails to validate the declared size based on the actual bytes received when parsing HID report descriptors. Instead, it only checks whether the descriptor fits...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability stemming from Canvas memory corruption. This vulnerability may allow remote attackers to execute arbitrary code outside the sandbox via specially crafted HTML pages...

GNU UnRTF buffer error vulnerability

Versions of GNU UnRTF prior to 0.21.12 have a buffer error vulnerability, which stems from out-of-bounds writing. When users open RTF files specially crafted by attackers, this can lead to a denial-of-service attack...

ASUS Router buffer error vulnerability

The ASUS Router ASUSWRT 3.0.0.4386 series and ASUSWRT 3.0.0.4388 series versions have a buffer error vulnerability. This vulnerability arises from the lack of checking input size before buffer copying, which may allow adjacent authenticated users to manipulate device operations by submitting...

Ning LZF Compressor Buffer Error Vulnerability

The Ning LZF Compressor versions prior to 1.2.0 have a buffer error vulnerability. This vulnerability stems from the UnsafeChunkDecoder class, which relies on sun.misc.Unsafe, and does not validate reverse references and literal operations. This can lead to out-of-bounds memory access. Attackers...

HarfBuzz buffer error vulnerability

The HarfBuzz version 8.0.0 to 14.6.0 contains a buffer error vulnerability. This vulnerability stems from an error in the WAMR signature imported by fontglyphtostring in the experimental WebAssembly shaper. An attacker can provide a specially crafted font, and their wasm module will place the...

Google Chrome buffer error vulnerability

Google Chrome on Android versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from GPU memory corruption, allowing remote attackers to read memory within the sandbox through a specially crafted HTML page...

Google Chrome buffer error vulnerability

Google Chrome on Mac versions prior to 156.0.8078.47 have a buffer error vulnerability. This vulnerability stems from Autofill memory corruption, and it could allow remote attackers to execute arbitrary code within the sandbox through a specially crafted HTML page...

Google Chrome buffer error vulnerability

Google Chrome on Android versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from Mobile memory corruption and could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 have a buffer error vulnerability. This vulnerability stems from an incorrect range value in SiteIsolation. A remote attacker can execute arbitrary code within a sandbox by using a specially crafted HTML page...

GIMP buffer error vulnerability

GIMP has a buffer error vulnerability. This vulnerability stems from the PSD thumbnail loader using a fixed 3-byte step for BGR-to-RGB channel swapping, without verifying whether the JPEG thumbnail is in RGB format. Specialized grayscale PSD thumbnails can lead to out-of-bound read and write...

Pillow buffer error vulnerability

Versions of Pillow prior to 13.0.0 have a buffer error vulnerability. This vulnerability arises when the TIFF encoder retains a TIFF metadata plane size that does not match BitsPerSample, causing it to read beyond the ColorMap buffer. This can lead to out-of-bounds reads, exposure of heap memory,...

Pillow buffer error vulnerability

Versions of Pillow prior to 13.0.0 have a buffer error vulnerability. This vulnerability arises from the ImageMorph.MorphOp.apply function, which processes zero-width images. When PPM and PGM inputs create images with a width of zero, the native morphological routine index outrowwidth - 1 does no...

openGauss-server Buffer Error Vulnerability

The openGauss-server versions 2.1.0, 3.0.0 to 3.0.6, 3.1.0, 5.0.0 to 5.0.5, 5.1.0, 6.0.0 to 6.0.6, 7.0.0-RC1, 7.0.0-RC2, and 7.0.0-RC3 have a buffer error vulnerability. This vulnerability arises from the HllObjectUnpack unpacking function, which does not verify the relationship between lenTotal...

Emergence libdisplay-info buffer error vulnerability

Emersion libdisplay-info versions 0.4.0 and earlier have a buffer error vulnerability. This vulnerability stems from the DisplayID v1 parser in displayid.c, which fails to properly handle cases where the data block declaration length exceeds the segment length. Attackers can exploit this by...