SAP 3D Visual Enterprise Viewer PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View, a free viewer from Bentley Systems, Inc. An out-of-bounds write vulnerability exists in Bentley View DGN file parsing, which stems from the fact that data created in a DGN file can trigger a write operation beyond the end of the allocated buffer. An attacker could exploit this...

CVE-2021-41208: NULL Pointer Dereference

TensorFlow is an open source platform for machine learning. In affected versions the code for boosted trees in TensorFlow is still missing validation. As a result, attackers can trigger denial of service via dereferencing nullptrs or via CHECK-failures as well as abuse undefined behavior binding...

PT-2021-22127

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned Description The issue allows an attacker to rewrite memory in any location of the affected product by exploiting API functions that permit writing or copying data into a given buffer, as the client...

(Pwn2Own) Parallels Desktop Toolgate Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgat...

Modesty Pdf2json 缓冲区错误漏洞

PDF2JSON is a conversion library based on XPDF 3.02 that can be used to convert PDF pages page by page to JSON and XML formats. A denial of service vulnerability exists in the CCITTFaxStream::lookChar function in PDF2JSON version 0.70. The vulnerability stems from an invalid write of size 2. An...

DEBIAN-CVE-2020-28010

Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small on some common platforms...

PT-2021-17965

Name of the Vulnerable Software and Affected Versions: Deark versions prior to 1.5.8 Description: The issue arises from a specially crafted input file that can cause a NULL pointer dereference in the dbuf write function, located in src/deark-dbuf.c. Recommendations: For versions prior to 1.5.8,...

ffmpeg:ffmpeg_AV_CODEC_ID_SGA_fuzzer: Heap-buffer-overflow in lzss_decompress

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5176667708456960 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDSGAfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x631000010c8...

FastStone Image Viewer 缓冲区错误漏洞

FastStone Image Viewer is a free image viewing, converting and editing tool. An out-of-bounds write vulnerability exists in FSViewer.exe+0x96cf in FastStone Image Viewer 7.5. No details of the vulnerability are provided at this time...

PT-2021-9624

Name of the Vulnerable Software and Affected Versions SoftMaker Office 2021’s TextMaker application affected versions not specified Description An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality. A specially crafted document can cause the document...

CVE-2020-14937

Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder. The length of provided input/output buffers is insufficiently verified during the encoding and decoding of data. This may lead to out-of-bounds buffer read or write access ...

CVE-2019-10495

CVE-2019-10495 describes an arbitrary buffer write during processing of sequence headers for HEVC/AVC encoding in Qualcomm Snapdragon SoCs (wide range of Snapdragon Auto/Compute/Connectivity/IoT devices). The vulnerability is caused by a buffer-write flaw in the encoder path; vulnerable component...

CVE-2019-10495

Arbitrary buffer write issue while processing sequence header during HEVC or AVC encoding. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, MSM8996AU,...

PT-2019-11888

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions in MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A...

CVE-2018-12115

In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding recognized by Node.js under the names 'ucs2', 'ucs-2', 'utf16le' and 'utf-16le', Bufferwrite can be abused to write outside of the bounds of a single Buffer. Writes that start from the second-to-last...

Delta Industrial Automation TPEditor TPE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation TPEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

nodejs: Out of bounds (OOB) write via UCS-2 encoding

In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding recognized by Node.js under the names 'ucs2', 'ucs-2', 'utf16le' and 'utf-16le', Bufferwrite can be abused to write outside of the bounds of a single Buffer. Writes that start from the second-to-last...

Design/Logic Flaw

In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429,...