The vulnerability of the search_in_range function in the Oniguruma library, related to reading beyond the permissible buffer limits, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the searchinrange function in the Oniguruma library relates to integer overflow of values. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

The vulnerability of QEMU’s emulation software lies in its ability to read data beyond the allowed buffer limits, allowing an attacker to access confidential data.

The vulnerability of QEMU’s emulation software-related hardware lies in reading data from buffer files beyond acceptable limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

Siemens JT2GO 和 Siemens Teamcenter Visualization 缓冲区错误漏洞

Siemens Jt2go is a JT file viewer.Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios. A buffer over-read vulnerability exists in Siemens JT2Go versions prior to 13.2 and Teamcenter Visualization versions prior to 13.2. The...

Siemens JT2GO 缓冲区错误漏洞

Siemens Jt2go and Siemens Teamcenter Visualization are both products of the German company Siemens. Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. A buffer over-read vulnerability exis...

Siemens JT2GO 缓冲区错误漏洞

Siemens Jt2go and Siemens Teamcenter Visualization are both products of Siemens AG, Germany. Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. A buffer over-read vulnerability exists in...

Siemens JT2GO 缓冲区错误漏洞

Siemens Jt2go and Siemens Teamcenter Visualization are both products of Siemens AG, Germany. Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. A buffer over-read vulnerability exists in...

The vulnerability of the fetch_interval_quantifier function in the Oniguruma library, related to reading data beyond the allowable buffer size, allows a hacker to trigger a service failure.

The vulnerability of the fetchintervalquantifier function in the Oniguruma library relates to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the `str_lower_case_match` component in the Oniguruma regular expression library, which involves reading data beyond the allowed buffer limits, allows attackers to cause service interruptions.

The vulnerability of the strlowercasematch component in the Oniguruma regular expression library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the library for simplifying project migration in Libbsd, related to reading beyond the permissible buffer data limits, allows attackers to gain access to confidential data and also trigger service failures.

The vulnerability of the library for simplifying project migration in Libbsd is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures...

The vulnerability of the ImfDwaCompressor.cpp library in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels. This vulnerability stems from reading data beyond the allowable buffer size, allowing attackers to cause system failures.

The vulnerability of the ImfDwaCompressor.cpp library, a software component for image storage with wide dynamic range brightness in OpenEXR format, lies in the execution of operations that exceed the allowable buffer data size limits. Exploiting this vulnerability could allow an attacker to cause...

Siemens Jt2go 和 Siemens Teamcenter Visualization 缓冲区错误漏洞

Siemens Jt2go is a JT file viewer.Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios. A buffer over-read vulnerability exists in Siemens JT2Go versions prior to 13.2 and Teamcenter Visualization versions prior to 13.2. The...

The vulnerability of the `license_read_new_or_upgrade_license_packet` component in the FreeRDP remote desktop protocol, related to reading data beyond the allowed boundaries of the buffer, allows a intruder to access confidential data and also trigger a service failure.

The vulnerability of the licensereadneworupgradelicensepacket component in the FreeRDP remote desktop protocol relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data and also cause servic...

The vulnerability of the ImfTileOffsets.cpp library in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from reading data beyond the allowable buffer size. This allows attackers to cause system failures.

The vulnerability of the ImfTileOffsets.cpp library in software for storing images with wide dynamic range brightness in OpenEXR is related to the operation being performed within acceptable buffer data limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the `xmlEncodeEntitiesInternal` function in the `libxml2/entities.c` file of the Libxml2 library involves reading data beyond the allowed buffer limits. This allows attackers to access confidential data and also trigger a denial-of-service attack.

The vulnerability of the xmlEncodeEntitiesInternal function in the libxml2/entities.c file of the Libxml2 library is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service interruptions...

The vulnerability of the ReadTIFFImage function in the coders/tiff.c component of the console-based image editing tool ImageMagick, which involves reading data beyond the allowable buffer limits, allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ReadTIFFImage function in the coders/tiff.c component of the console-based image editing tool ImageMagick is related to an incorrect memory allocation limit. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and...

The vulnerability of the PALM image encoding engine in the ImageMagick console-based graphics editor allows an attacker to trigger a service failure by exceeding the allowed buffer data size.

The vulnerability of the PALM image encoding engine in the ImageMagick graphics editor involves reading data beyond the acceptable buffer limits. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

The vulnerability of the WriteOnePNGImage() function in the ImageMagick console graphics editor’s coders/png.c component allows a attacker to cause a service failure by reading data beyond the allowed buffer limits.

The vulnerability of the WriteOnePNGImage function in the ImageMagick console graphics editor’s coders/png.c file is related to an incorrect condition for exiting a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created file...

qualcomm 芯片缓冲区错误漏洞

Qualcomm MDM9206 and others are products of Qualcomm Incorporated Qualcomm.The MDM9206 is a central processing unit CPU product.The APQ8053 is a central processing unit CPU product.The SDX55 is a modem. The qualcomm chips have a buffer error vulnerability that stems from an incorrect overflow che...

Advisory ROSA-SA-2021-1832

Software: exempi 2.2.0 OS: Cobalt 7.9 CVE-ID: CVE-2017-18235 CVE-Crit: MEDIUM CVE-DESC: An issue was discovered in Exempi before 2.4.3. The VPXChunk class in XMPFiles / source / FormatSupport / WEBPSupport.cpp does not guarantee non-zero width and height values, allowing remote attackers to cause...

The vulnerability of the `virgl_cmd_get_capset` function in the `hw/display/virtio-gpu-3d.c` component of the QEMU hardware emulation software occurs due to reading data beyond the buffer’s acceptable limits. This allows an attacker to trigger a service failure.

The vulnerability of the virglcmdgetcapset function in the hw/display/virtio-gpu-3d.c component of the QEMU hardware emulation software is related to reading data from a buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to trigger a service failure using the...