grub2 缓冲区错误漏洞

grub2 is a Linux system boot program from the GNU community. A buffer error vulnerability exists in grub2, which can be exploited by an attacker to cause out-of-bounds writes during Huffman table processing via a carefully crafted PNG image...

Bandisoft ARK library 缓冲区错误漏洞

Bandisoft ARK library is a Korean Bandisoft library to decompress most of the existing ZIP, RAR, ALZ, EGG and other compression formats in various OS environments such as Windows, macOS, Linux, etc., and create compressed files in ZIP/7Z format. A buffer error vulnerability exists in Bandisoft AR...

NVIDIA GPU Display Driver 缓冲区错误漏洞

NVIDIA GPU Display Driver is a driver software from NVIDIA Corporation that is used for interactive support of graphics card display modules in operating systems. A buffer error vulnerability exists in the NVIDIA GPU Display Driver, which could allow an unauthorized attacker on a network to cause...

Apple TV 缓冲区错误漏洞

Apple TV 4K and Apple TV HD are both products of Apple Inc.Apple TV 4K is a smart set-top box. The Apple TV 4K is a smart set-top box used to launch 4K Hdr images.Apple TV HD is a high-definition television set-top box product.... A buffer error vulnerability exists in Apple TV 4K, Apple TV 4K 2n...

Apple TV 缓冲区错误漏洞

Apple TV 4K and Apple TV HD are both products of Apple Inc.Apple TV 4K is a smart set-top box. The Apple TV 4K is a smart set-top box used to launch 4K Hdr images.Apple TV HD is a high-definition television set-top box product.... A buffer error vulnerability exists in Apple TV 4K, Apple TV 4K 2n...

Apple TV 缓冲区错误漏洞

Apple TV 4K and Apple TV HD are both products of Apple Inc.Apple TV 4K is a smart set-top box. The Apple TV 4K is a smart set-top box used to launch 4K Hdr images.Apple TV HD is a high-definition television set-top box product.... A buffer error vulnerability exists in Apple TV 4K, Apple TV 4K 2n...

Apple tvOS 缓冲区错误漏洞

Apple tvOS is a set of smart TV operating systems from Apple USA. A buffer error vulnerability exists in Apple tvOS versions 15.0 19J346 through 15.4.1 19L452, which stems from a boundary error in IOSurfaceAccelerator. A native application can exploit the vulnerability to execute arbitrary code...

Intel NUC 缓冲区错误漏洞

The Intel NUC is a small minicomputer from Intel USA. A security vulnerability exists in the Intel NUC that stems from insufficient input validation. An authenticated attacker could exploit the vulnerability to achieve privilege escalation...

Siemens JT2GO和Siemens Teamcenter Visualization 缓冲区错误漏洞

Siemens Jt2go is a JT file viewer.Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios. A security vulnerability exists in Siemens JT2Go and Teamcenter Visualization that can be exploited by an attacker to execute code in the context...

AMD System Management Unit 缓冲区错误漏洞

AMD System Management Unit SMU is a system management unit of AMD, Inc. A denial of service vulnerability exists in AMD System Management Unit, which stems from inadequate inspection of bindings in the System Management Unit SMU and can be exploited by an attacker to cause a denial of service...

Xpdf 缓冲区错误漏洞

Xpdf is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. Xpdf version 4.0.4 there is a security vulnerability , the vulnerability stems from TextOutputDev.cc of the TextLine class has invalid memory access. An...

ADMesh 缓冲区错误漏洞

ADMesh is a program for working with triangular solid meshes. A security vulnerability exists in ADMesh version 0.98.4 and earlier, which stems from a heap-based out-of-bounds read in stlupdateconnectsremove1 called from stlremovedegenerate in connect.c in libadmesh.a. The vulnerability is caused...

squirrel 缓冲区错误漏洞

squirrel is the stable version of the programming language SQUIRREL 3.2. A security vulnerability exists in squirrel version 3.2, which stems from the lack of a specific sqreservestack call to threadcall in sqbaselib.cpp. No detailed vulnerability details are currently available...

多款MediaTek产品缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek. A security vulnerability exists in various MediaTek products, which stems from an integer overflow that may cause an application to crash and can be exploited by an attacker to cause a local denial of service. Th...

Libmobi 缓冲区错误漏洞

Libmobi is a C library . It is used to process Mobipocket/Kindle MOBI e-book format documents. A security vulnerability in parserawml.c:1416 in the GitHub library Libmobi before 0.11, which stems from a buffer error, can be exploited by an attacker to read sensitive information or cause a crash...

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, Inc USA. Google Chromium suffers from a buffer error vulnerability that stems from multiple security issues found in Chromium, resulting in the execution of arbitrary code, denial of service, or information disclosure...

Autodesk Navisworks 缓冲区错误漏洞

Autodesk Navisworks is 3D model review software for architecture, engineering, and construction from Autodesk, Inc. A buffer error vulnerability exists in Autodesk Navisworks 9.0.7 in Autodesk Navisworks 2022, which stems from a memory corruption vulnerability that could lead to code execution vi...

多款 MediaTek 产品缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. A security vulnerability exists in several MediaTek products, which stems from an incorrect boundary check in ccci, where a kernel pointer may be leaked...

多款 MediaTek 产品缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. A security vulnerability exists in several MediaTek products, which stems from a lack of boundary checking in atf spm, which may result in out-of-bounds writes...

Bentley Systems MicroStation 缓冲区错误漏洞

Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. A buffer error vulnerability exists in Bentley MicroStation CONNECT version 10.16.02.034, which originates from a failure to properly validate the length of user-supplied data befo...