GHSA-G3VV-G2J5-45F2 ipld/go-codec-dagpb panics when processing certain blocks

Impact Decoding certain blocks using the go-ipld-prime version of the dag-pb codec go-codec-dagpb can cause a panic. The panic comes from an assumption that the reported link length is accurate, but if the block ends before that reported length then it’s a buffer overread. Patches The issue is...

CVE-2022-28805

singlevar in lparser.c in Lua from including 5.4.0 up to excluding 5.4.4 lacks a certain luaKexp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code...

Adobe Animate Buffer Overflow Information Disclosure

The vulnerability of the Adobe Animate software for creating multimedia and computer animations relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Cluster Component Code Execution

Vulnerability of the Cluster component: General database management systems like MySQL Cluster involve reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Lua buffer error vulnerability

Lua is a lightweight, extensible open source scripting language from the Lua LUA team. A buffer error vulnerability exists in Lua 5.4.4 and earlier, which stems from the lack of a specific luaKexp2anyregup call in singlevar in lparser.c, resulting in an overread of the heap-based buffer, which...

Adobe Animate Buffer Overflow Information Disclosure

The vulnerability of the Adobe Animate software for creating multimedia and computer animations relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Adobe Animate Buffer Overflow Information Disclosure

The vulnerability of the Adobe Animate software for creating multimedia and computer animations relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2022-17563 · Unknown · Go-Codec-Dagpb

Name of the Vulnerable Software and Affected Versions: go-codec-dagpb versions prior to 1.3.1 Description: The dag-pb codec can panic when decoding invalid blocks, due to an assumption that the reported link length is accurate. If the block ends before the reported length, it results in a buffer...

CVE-2022-22519

A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system...

Adobe Framemaker Buffer Overflow Info Disclosure

The vulnerability of the Adobe Framemaker desktop publishing system relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...

Adobe After Effects Buffer Overflow Info Disclosure

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Adobe Media Encoder Buffer Overflow Info Disclosure

The vulnerability of the Adobe Media Encoder application relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Autodesk AutoCAD buffer error vulnerability

Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. Autodesk AutoCAD suffers from a buffer error vulnerability that originates from a buffer over-read, which could be exploited by an attacker to obtain sensitive information or cause a system cra...

Adobe Animate Buffer Overflow

The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information using a specially crafted file...

Adobe Character Animator Heap Buffer Overflow Privilege Escalation

The vulnerability of the Adobe Character Animator software for animation processing is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain unauthorized access to protected information using ...

gf_odf_del_ipmp_tool Heap Buffer Overflow DoS

The vulnerability of the gfodfdelipmptool function in the odfcode.c component of the multimedia platform GPAC involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and also cause service failures...

Adobe Character Animator Buffer Overflow Information Disclosure

The vulnerability of the Adobe Character Animator software for animation processing is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

CVE-2022-22519

A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system...

mbedtls TLS DoS

The vulnerability of the mbedtlsx509crlparseder function in TLS and SSL protocols involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a remote attacker to cause service failures...

CGAL Nef_S2/SNC_io parser.h Heap Buffer Overflow DoS

The vulnerability of the NefS2/SNCio parser.h component in the CGAL algorithm library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a...