Microsoft Office PowerPoint buffer error vulnerability

Microsoft Office PowerPoint has a buffer error vulnerability, which stems from excessive buffer reading in Microsoft Office PowerPoint. This vulnerability may allow unauthorized attackers to leak information through the network...

HPE NonStop EXPAND buffer error vulnerability

The HPE NonStop EXPAND T9057L02^AIG and earlier versions contain a buffer error vulnerability stemming from out-of-bounds memory read/write operations...

Konstanty Bialkowski libmodplug buffer error vulnerability

Konstanty Bialkowski’s libmodplug versions 0.8.9.1 and earlier have a buffer error vulnerability. This vulnerability stems from the function CSoundFile::ReadAMS2 in src/loadams.cpp, which handles specially crafted AMS files. During processing, a heap-based out-of-bounds read occurs, and the mode...

Libical buffer error vulnerability

Libical 4.0.6 and earlier versions have a buffer error vulnerability. This vulnerability stems from the icalvaluedecodeicalstring function, which performs decoding of inputs ending with a slash. During this process, the function accesses heap memory in src/libical/icalvalue.c beyond its bounds,...

Dave Nardella Snap7 OFFICIAL Buffer Error Vulnerability

Dave Nardella Snap7 OFFICIAL versions 1.4.3 and earlier contain a buffer error vulnerability. This vulnerability stems from the lack of checking of the DataLength field in TSnap7 OFFICIAL MicroClient::opReadArea. This allows out-of-buffer writing, enabling malicious S7 peers to overflow the clien...

Tatsh bincookie buffer error vulnerability

Versions of Tatsh bincookie prior to 0.1.9 contain a buffer error vulnerability. This vulnerability stems from the bincookieinitfile function in bincookie.h, which allocates buffers based on the actual length of the .binarycookies file. However, it uses the numpages field of the file as the loop...

Swami Project libinstpatch buffer error vulnerability

The Swami Project libinstpatch versions 1.1.7 and earlier contain a buffer error vulnerability. This vulnerability stems from the ipatchsf2genisvalid function in the SoundFont 2 loader, which does not perform a range check on the generator ID before the validity mask test. Attackers can exploit...

Robert Kausch mp4v2 buffer error vulnerability

Robert Kausch’s mp4v2 2.1.3 and earlier versions have a buffer error vulnerability. This vulnerability stems from the MP4File::GetChapters function, which involves heap-based out-of-bounds read operations. Attackers can exploit this vulnerability by using specially crafted QuickTime chapter sampl...

OpenSlide buffer error vulnerability

OpenSlide 4.0.1 and earlier versions have a buffer error vulnerability. This vulnerability stems from MIRAX readers’ ability to read beyond the heap boundary. Attackers can exploit this by using specially crafted Slidedat.ini values to access elements of the slidepositions array that are outside...

Konstanty Bialkowski libmodplug buffer error vulnerability

Konstanty Bialkowski’s libmodplug versions 0.8.9.1 and earlier have a buffer error vulnerability. This vulnerability stems from the fact that the nPat parameter in the CSoundFile::ReadDSM function is not validated against MAXPATTERNS. Attackers can exploit this vulnerability by providing a...

HPE NonStop EXPAND buffer error vulnerability

The HPE NonStop EXPAND T9057L02 AIG and earlier versions contain a buffer error vulnerability stemming from an out-of-bounds memory read...

UADE buffer error vulnerability

Versions of UADE 3.05 and earlier contain a buffer error vulnerability. This vulnerability stems from the unsigned buffersize subtraction operation in the amifilemagic.c file’s UADEfilemagic function, which can cause a wrap when dealing with short inputs. This leads to out-of-buffer reading,...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer error vulnerability. This vulnerability stems from an insecure pointer dereferencing issue in Microsoft Office Word, which may allow unauthorized attackers to leak information through the network...

HPE NonStop EXPAND buffer error vulnerability

The HPE NonStop EXPAND T9057L02 AIG and earlier versions contain a buffer error vulnerability stemming from an out-of-bounds memory read...

HPE NonStop Hpjmeter buffer error vulnerability

Versions of HPE NonStop Hpjmeter T0866L50 prior to AAM contain a buffer error vulnerability caused by stack and heap buffer overflows...

David Eriksson Unshield buffer error vulnerability

David Eriksson’s Unshield versions 1.6.2 and earlier contain a buffer error vulnerability. This vulnerability stems from the Unshieldgetfiletable function, which allows for heap out-of-bounds reads without checking the offset of the cabinet header. An attacker could provide a specially crafted...

OpenSIPS buffer error vulnerability

OpenSIPS versions 3.6.0, 3.6.1, 3.6.2, 3.6.3, 3.6.4, 3.6.5, 3.6.6, 3.6.7, 3.6.8, 4.0.0, and 4.0.1 have a buffer error vulnerability. This vulnerability stems from the operation of the rtpproxyoffer/rtpproxyanswer functions in the rtpproxy component, which leads to out-of-bounds read access. This...

Red Hat Enterprise Linux buffer error vulnerability

Red Hat Enterprise Linux has a buffer error vulnerability, which stems from a double offset error in the log mapping calculation of DPDK lib/vhost, potentially leading to incorrect memory access...

Red Hat Enterprise Linux buffer error vulnerability

Red Hat Enterprise Linux versions 8, 9, and 10 have a buffer error vulnerability. This vulnerability stems from the software GSO library in DPDK, which does not check whether the header is suitable for the source segment or the target buffer when copying the packet header to the new mbuf...

Okta Credential Provider for Windows Buffer Error Vulnerability

Okta Credential Provider for Windows versions prior to 1.4.6.0 have a security vulnerability. This vulnerability stems from the unauthorized parsing of serialized credentials into Kerberos login structures without verification. Additionally, no checks are performed on the buffer size and the offs...