6236 matches found
OESA-2021-1070 python-pillow security update
Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. Security Fixes: In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file...
The vulnerabilities of the 3D model rendering software programs Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, and Luxion KeyVR allow attackers to execute arbitrary code.
The vulnerability of the 3D model rendering software programs Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, and Luxion KeyVR lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code during the...
Qualcomm 封闭源组件安全漏洞
A security vulnerability exists in the Qualcomm Closed Source component that stems from the absence of a NULL termination check on the SDP, where a buffer over-read may occur when parsing received SDP values...
Qualcomm 封闭源组件安全漏洞
The Qualcomm component is a component of Qualcomm Incorporated Qualcom. Intrinsic components that provide Qualcomm devices A security vulnerability exists in the Qualcomm Closed Source Component that stems from improper length checking and buffer over-reading when processing maximum length MT SMS...
The vulnerability of Adobe Audition for Windows and macOS, related to reading data beyond the buffer in memory, allows a hacker to gain unauthorized access to protected information.
The vulnerability of Adobe Audition for Windows and macOS relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of Adobe Premiere Rush’s video editing software, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of Adobe Premiere Rush’s video editing software relates to reading data beyond the buffer limit in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...
The vulnerability of Adobe Premiere Pro’s nonlinear video editing software, related to reading beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.
The vulnerability of Adobe Premiere Pro’s nonlinear video editing software is related to reading data beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
OESA-2021-1038 php security update
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...
The vulnerability of the professional video editing software Adobe Premiere Pro, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of the professional video editing software Adobe Premiere Pro lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
OESA-2021-1024 p11-kit security update
Provides a way to load and enumerate PKCS11 modules. Provides a standard configuration setup for installing PKCS11 modules in such a way that they're discoverable. Also solves problems with coordinating the use of PKCS11 by different components or libraries living in the same process.\r\n\r\n...
The vulnerability of Adobe Premiere Rush’s video editing software, related to reading data beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.
The vulnerability of Adobe Premiere Rush’s video editing software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
OESA-2021-1013 glibc security update
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...
OESA-2021-1006 memcached security update
Memcached is a high-performance, distributed memory object caching system, generic in nature, but originally intended for use in speeding up dynamic web applications by alleviating database load. You can think of it as a short-term memory for your applications.\r\n\r\n Security Fixes:\r\n\r\n...
glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding
A flaw was found in glibc. When processing input in the EUC-KR encoding, an invalid input sequence could cause glibc to read beyond the end of a buffer, resulting in a segmentation fault. The highest threat from this vulnerability is to system availability...
The vulnerability of the Adobe Media Encoder application, related to reading beyond the buffer in memory, allows an attacker to disclose protected information.
The vulnerability of the Adobe Media Encoder application relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
Qualcomm Wlan Firmware Buffer Error Vulnerability
Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Wlan Firmware that originates from a buffer over-read due to improper IE length checking in receive beacons...
There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service.
...
It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make the application crash.
...