PDF Reader Buffer Overflow Information Disclosure

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 lies in the reading of data beyond the buffer in memory. Exploiting thi...

Adobe Audition Buffer Overflow Info Disclosure

The vulnerability of Adobe Audition is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Adobe Illustrator Heap Buffer Overflow

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges using a specially crafted file...

PDF Reader Buffer Overflow Information Disclosure

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 lies in the reading of data beyond the buffer in memory. Exploiting thi...

radare2 buffer error vulnerability

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in radare2 that stems from an error that causes the program to read more data than is expected at the end of a buffer. No details of the vulnerability are provided at this time...

Adobe Framemaker Buffer Overflow Info Disclosure

The vulnerability of the Adobe Framemaker desktop publishing system relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...

CVE-2022-27523

A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the curre...

CVE-2022-27523

A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the curre...

Denial Of Service (DoS)

github.com/ipld/go-codec-dagpb is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization of the link length causing a buffer overread which leads to a panic...

PDF Buffer Overflow Unauthorized Access

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 relates to reading beyond the buffer in memory. Exploiting this...

Adobe XMP-Toolkit-SDK Buffer Overflow Unauthorized Access

The vulnerability of the Adobe XMP-Toolkit-SDK lies in the creation of temporary files with insecure permissions. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2022-18946 · Bentley · Bentley View

Name of the Vulnerable Software and Affected Versions: Bentley View version 10.16.02.022 Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

PT-2022-18940 · Bentley · Microstation Connect

Name of the Vulnerable Software and Affected Versions: Bentley MicroStation CONNECT version 10.16.02.34 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicio...

PT-2022-18950 · Bentley · Microstation Connect

Name of the Vulnerable Software and Affected Versions: Bentley MicroStation CONNECT version 10.16.02.034 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

PT-2022-18952 · Bentley · Microstation Connect

Name of the Vulnerable Software and Affected Versions: Bentley MicroStation CONNECT version 10.16.02.034 Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open ...

PT-2022-2609

Name of the Vulnerable Software and Affected Versions Ruby versions 2.6.0 through 2.6.9 Ruby versions 2.7.x through 2.7.5 Ruby versions 3.0.0 through 3.0.3 Ruby versions 3.1.0 through 3.1.1 Description The issue is related to a buffer over-read in Ruby, specifically in String-to-Float conversion,...

PT-2022-19137 · Bentley · Microstation Connect

Name of the Vulnerable Software and Affected Versions: Bentley MicroStation CONNECT version 10.16.2.034 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicio...

CGAL store_sm_boundary_item Buffer Overflow DoS

The vulnerability of the storesmboundaryitem function in the NefS2/SNCioparser.h library, a part of the computational geometry algorithm library CGAL, relates to reading data beyond the allowed buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data...

.fig Fig2dev Heap Buffer Overflow DoS

The vulnerability of the readobjects function in the read.c component of the .fig conversion utility Fig2dev involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

ipld/go-codec-dagpb panics when processing certain blocks

Impact Decoding certain blocks using the go-ipld-prime version of the dag-pb codec go-codec-dagpb can cause a panic. The panic comes from an assumption that the reported link length is accurate, but if the block ends before that reported length then it’s a buffer overread. Patches The issue is...