The vulnerability of the pci_dev_for_each_resource() function in the Linux operating system’s PCI kernel component allows a hacker to gain unauthorized access to protected information or cause service failures.

The vulnerability of the pcidevforeachresource function in the Linux operating system’s PCI core component is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause...

PT-2024-3829 · Nvidia +3 · Nvidia Gpu Display Driver +3

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux affected versions not specified Description: The issue is related to a buffer management error, where an attacker may access a memory location after the end of the buffer. A successful exploit of this issue...

The vulnerability of the dissect_bgp_open() function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the dissectbgpopen function in the Wireshark network traffic analyzer is related to the operation that occurs outside the buffer in memory when processing extended BGP parameter formats. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the slirp.c component of the TCP-IP Libslirp emulator allows a hacker to access confidential data.

The vulnerability of the slirp.c component in the Libslirp TCP-IP emulator involves reading data beyond the allowable buffer size. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

The vulnerability in the `src/ncsi.c` component of the TCP-IP Libslirp emulator allows a attacker to access confidential data.

The vulnerability of the src/ncsi.c component of the TCP-IP Libslirp emulator is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read when callback functions are enabled through the optional WOLFSSLCALLBACKS flag. An attacker can read 5 bytes from the heap via malicious TLS 1.3 connection. Remediation Upgrade wolfssl to version 5.6.6 or higher...

DEBIAN-CVE-2023-6936

In wolfSSL prior to 5.6.6, if callback functions are enabled via the WOLFSSLCALLBACKS flag, then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes WOLFSSLCALLBACKS is only intended for debugging...

UBUNTU-CVE-2023-6936

In wolfSSL prior to 5.6.6, if callback functions are enabled via the WOLFSSLCALLBACKS flag, then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes WOLFSSLCALLBACKS is only intended for debugging...

oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c

An out-of-bounds read vulnerability was found in the way Oniguruma handled regular expressions with GB18030 character encoding. A UChar pointer is dereferenced without checking if it passed the end of the matched string, leading to a heap-based buffer over-read. A remote attacker could abuse this...

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

PT-2024-15130 · Wolfssl +1 · Wolfssl +1

Name of the Vulnerable Software and Affected Versions: wolfSSL versions prior to 5.6.6 Description: The issue allows a malicious TLS client or network attacker to trigger a buffer over-read on the heap of 5 bytes if callback functions are enabled via the WOLFSSL CALLBACKS flag. This flag is only...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to reading data outside the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Reader 2020 lies in their ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Reader 2020 is related to the reading of data outside the buffer in memory during the processing of the CHARSTRINGS INDEX format for...

Adobe Substance 3D Painter 缓冲区错误漏洞

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. A buffer error vulnerability previously existed in Adobe Substance 3D Painter version 9.1.1, which stemmed from the presence of an out-of-bounds read that could lead to a sensitive memory leak. An...

Adobe Substance 3D Painter 缓冲区错误漏洞

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. A buffer error vulnerability exists in Adobe Substance 3D Painter 9.1.1 and prior versions, which stems from an out-of-bounds read while parsing a carefully crafted file, which could result in a read...

MGASA-2024-0037 Updated mbedtls packages fix security vulnerabilities

This update brings the mbedtls packages from 2.28.3 to the latest 2.28.7 release in the LTS branch, fixing a number of bugs as well the following security vulnerabilities: - Buffer overread in TLS stream cipher suites. - Timing side channel in private key RSA operations. - Buffer overflow in...

Updated mbedtls packages fix security vulnerabilities

This update brings the mbedtls packages from 2.28.3 to the latest 2.28.7 release in the LTS branch, fixing a number of bugs as well the following security vulnerabilities: - Buffer overread in TLS stream cipher suites. - Timing side channel in private key RSA operations. - Buffer overflow in...

PT-2024-7766

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description The issue is related to a library called libodx.dll used in Autodesk AutoCAD for modeling, design, and drafting. It involves reading data beyond a specified buffer, which can be...