CVE-2021-36064

XMP Toolkit version 2020.1 and earlier is affected by a Buffer Underflow vulnerability which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2021-36064

XMP Toolkit version 2020.1 and earlier is affected by a Buffer Underflow vulnerability which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2021-36064: Buffer Underwrite

XMP Toolkit version 2020.1 and earlier is affected by a Buffer Underflow vulnerability which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe XMP Toolkit SDK buffer underflow vulnerability

Adobe XMP Toolkit SDK is a tagging technology from Adobe that allows you to embed data about a file called metadata into the file itself.Adobe XMP Toolkit SDK 2020.1 and earlier versions are vulnerable to buffer underflow. An attacker could exploit this vulnerability to execute arbitrary code...

PT-2021-5097 · Adobe +4 · Xmp Toolkit +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit versions 2020.1 and earlier Description: The issue is related to a Buffer Underflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

Adobe XMP Toolkit SDK security vulnerabilities

Adobe XMP Toolkit SDK is a tagging technology from Adobe that allows you to embed data about a file called metadata into the file itself.Adobe XMP Toolkit SDK 2020.1 and earlier versions are vulnerable to buffer underflow. An attacker could exploit this vulnerability to execute arbitrary code...

OpenSSL: Invalid TLS/DTLS Record Attack (20120510) - Windows

OpenSSL is prone to a buffer underflow vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-37162: Buffer Copy without Checking Size of Input

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. If an attacker sends a malformed UDP message, a buffer underflow occurs, leading to an out-of-bounds copy and possible remote co...

Denial Of Service

xlsx of sheetjs is vulnerable to denial of service. The vulnerability exists due to an XLS Xnum Buffer underflow. An attacker is able to crash the system by uploading a malicious crafted xlsx document...

SUSE: Security Advisory (SUSE-SU-2019:3056-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Arbitrary Code Execution

exim4 is vulnerable to arbitrary code execution. A heap buffer underflow in smtpungetc allows an attacker to execute arbitrary code on the host OS...

OSV-2018-441 Stack-buffer-underflow in ps_index

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9970 Crash type: Stack-buffer-underflow READ 8 Crash state: psindex psrun evalpostscriptfunc...

PT-2021-27606

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-underflow read crash. Technical details include a crash state involving ps index, ps run, and eval postscript func...

CVE-2020-24658

Arm Compiler 5 through 5.06u6 has an error in a stack protection feature designed to help spot stack-based buffer overflows in local arrays. When this feature is enabled, a protected function writes a guard value to the stack prior to above any vulnerable arrays in the stack. The guard value is...

CVE-2020-24658: Allocation of Resources Without Limits or Throttling

Arm Compiler 5 through 5.06u6 has an error in a stack protection feature designed to help spot stack-based buffer overflows in local arrays. When this feature is enabled, a protected function writes a guard value to the stack prior to above any vulnerable arrays in the stack. The guard value is...

PT-2020-15797

Name of the Vulnerable Software and Affected Versions Arm Compiler versions 5 through 5.06u6 Description The issue concerns a stack protection feature designed to help spot stack-based buffer overflows in local arrays. When this feature is enabled, a protected function writes a guard value to the...

PT-2022-2036

Name of the Vulnerable Software and Affected Versions glibc affected versions not specified Description A flaw was found in glibc, specifically an off-by-one buffer overflow and underflow in the getcwd function, which may lead to memory corruption when the size of the buffer is exactly 1. A local...

Valve's Steam Server Bugs Could've Let Hackers Hijack Online Games

Critical flaws in a core networking library powering Valve's online gaming functionality could have allowed malicious actors to remotely crash games and even take control over affected third-party game servers. "An attacker could remotely crash an opponent's game client to force a win or even...

CVE-2020-6016

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNPReceiveUnreliableSegment, leading to a Heap-Based Buffer Underflow and a free of memory not from the heap, resulting in a memory corruption and probably even a remot...

CVE-2020-6016

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNPReceiveUnreliableSegment, leading to a Heap-Based Buffer Underflow and a free of memory not from the heap, resulting in a memory corruption and probably even a remot...