CVE-2022-41172: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens a manipulated AutoCAD .dxf, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflo...

CVE-2022-41195: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens a manipulated EAAmiga Interchange File Format .iff, 2d.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-bas...

PT-2022-25001 · Sap · Sap 3D Visual Enterprise Author

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management. When a victim opens a manipulated SolidWorks Part .sldprt file in SAP 3D Visual Enterprise Author, it can trigger Remote Code Execution...

SAP 3D Visual Enterprise Author 缓冲区错误漏洞

SAP 3D Visual Enterprise Author is a desktop application for managing 2D, 3D, animation, video and audio assets from SAP. A buffer error vulnerability exists in SAP 3D Visual Enterprise Author version 9, which stems from a lack of proper memory management, and can be exploited by an attacker to...

CVE-2022-41172

Due to lack of proper memory management, when a victim opens a manipulated AutoCAD .dxf, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflo...

PT-2022-25718 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9 Description: The issue arises due to improper memory management. When a victim opens a manipulated VRML Worlds .wrl, vrml.x3d file from untrusted sources, it can trigger a Remote Code Execution. This...

PT-2022-25689 · Autodesk +1 · Autocad +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to inadequate memory management. When a manipulated AutoCAD .dwg file from untrusted sources is opened in SAP 3D Visual Enterprise Author, it can trigger Remote Code...

CVE-2022-41202: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens a manipulated Visual Design Stream .vds, vds.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflo...

PT-2025-41021

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the Distributed Lock Manager DLM component. Specifically, an invalid dereference of sb lvbptr can occur when handling lock blocks on the stack,...

PT-2022-31375

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A potential issue exists in the Bluetooth functionality, specifically related to a dangling sco conn and use-after-free in sco sock timeout. The actual impact and attack plausibility have not...

PT-2022-32272

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to a dangling sco conn and use-after-free in sco sock timeout. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31863

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.10.65 through 5.10.120 Description A potential issue exists in the Bluetooth functionality, specifically related to a dangling sco conn and a use-after-free in sco sock timeout. The actual impact and attack plausibility...

CVE-2022-2220

Insufficient Granularity of Access Control in an OpenShift router causes improper subdomain ownership verification, allowing route takeover. Once a custom route is created, the user must update the DNS provider by creating a canonical name CNAME record to expose this route externally. The CNAME...

PT-2022-28283

Name of the Vulnerable Software and Affected Versions tss-esapi versions prior to 6.1.2 tss-esapi versions prior to 7.1.0 Description This issue affects applications that start authorization sessions using an explicit initial nonce. When Context::start auth session is called with a nonce argument...

Potential segfault in `localtime_r` invocations

Impact Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library...

GHSA-CQPR-PCM7-M3JC Potential segfault in `localtime_r` invocations

Impact Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library...

PT-2022-28236

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue affects Unix-like operating systems, where a segfault can occur due to dereferencing a dangling pointer under specific circumstances. This happens when an environment variab...

GHSA-9PQX-G3JH-QPQQ Dangling reference in `access::Map` with Constant

An issue has been discovered in the arc-swap crate before 0.4.8 and 1.x before 1.1.0 for Rust. Use of arcswap::access::Map with the Constant test helper or with a user-supplied implementation of the Access trait could sometimes lead to dangling references being returned by the map...

Dangling reference in `access::Map` with Constant

An issue has been discovered in the arc-swap crate before 0.4.8 and 1.x before 1.1.0 for Rust. Use of arcswap::access::Map with the Constant test helper or with a user-supplied implementation of the Access trait could sometimes lead to dangling references being returned by the map...

SUSE-SU-2022:1758-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2021-28153: Fixed a dangling symlink when gfilereplace is used with GFILECREATEREPLACEDESTINATION bsc1183533...