CVE-2022-41145

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42372

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud involve reading beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud involve reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow a malicious actor to execute arbitrary code remotely...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to reading data beyond the buffer in memory, allows attackers to gain unauthorized access to information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information through a specially created malicious file...

The vulnerability in the `convert_strings` function of the `tinfo/read_entry.c` component in the input/output library for the Ncurses terminal control module allows a hacker to access confidential data and also trigger a service denial.

The vulnerability of the convertstrings function in the tinfo/readentry.c component of the input/output library for the Ncurses terminal control module is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to access confidential data and als...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to reading data beyond the buffer in memory, allows attackers to gain unauthorized access to information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information through a specially created malicious file...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, related to reading beyond the buffer in memory, allow attackers to gain unauthorized access to information.

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud involve reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to information through a specially...

The vulnerability of Adobe Dimension’s 3D design software, related to reading data beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created malicious file...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, related to reading beyond the buffer in memory, allow attackers to gain unauthorized access to information.

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to information through a...

The vulnerability of the Word97Import200.dll library in Corel WordPerfect, a text document creation and editing program, allows attackers to disclose protected information.

The vulnerability of the Word97Import200.dll library, which is part of the Corel WordPerfect text document creation and editing software, relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow attackers to disclose protected information through a specially create...

CVE-2022-40518

Information disclosure due to buffer overread in Core...

CVE-2022-40519

Information disclosure due to buffer overread in Core...

Information disclosure

Information disclosure due to buffer overread in Core...

Information disclosure

Information disclosure due to buffer overread in Core...

CVE-2022-40519

CVE-2022-40519 describes an information disclosure via a buffer overread in the Core component. Public documents tie this to Qualcomm chipset cores and note patches/mitigations exist: Qualcomm’s January 2023 security bulletin patches several CVEs (including 2022-40519) for affected chipsets; Leno...

CVE-2022-40518 Buffer overread in Core

Information disclosure due to buffer overread in Core...

CVE-2022-40518

CVE-2022-40518 is a buffer over-read in Core leading to information disclosure. Multiple connected sources tie this to Qualcomm chipsets and relate Lenovo ThinkPad X13 BIOS fixes (e.g., BIOS 1.47) and Qualcomm January 2023 patches addressing this family (CVE-2022-40516–40520). The Pixel security ...

CVE-2022-40518 Buffer overread in Core

Information disclosure due to buffer overread in Core...

PT-2023-12680 · Qualcomm · Snapdragon +38

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a denial of service that occurs while processing the fastboot flash command on mmc due to a buffer over read. Recommendations: A...

PT-2023-13807 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to information disclosure due to a buffer overread in Core. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...