Lucene search
+L

1728 matches found

Cvelist
Cvelist
added 2021/12/20 8:8 p.m.24 views

CVE-2021-43763 Adobe Dimension TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension versions 3.4.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

3.3CVSS3.6AI score0.0174EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2021/12/20 8:8 p.m.9 views

CVE-2021-43763 Adobe Dimension TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension versions 3.4.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

3.3CVSS6.3AI score0.0174EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2021/12/20 8:8 p.m.9 views

CVE-2021-44179 Adobe Dimension GIF File Parsing Memory Corruption Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.3 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

7.8CVSS7.8AI score0.02965EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/12/20 8:8 p.m.30 views

CVE-2021-44179 Adobe Dimension GIF File Parsing Memory Corruption Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.3 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

7.8CVSS5.8AI score0.02965EPSS
SaveExploits0References2
CVE
CVE
added 2021/12/20 8:8 p.m.68 views

CVE-2021-44179

Adobe Dimension: CVE-2021-44179 is a memory corruption vulnerability in versions 3.4.3 and earlier caused by insecure handling of a malicious GIF file, allowing arbitrary code execution under the current user. Exploitation requires user interaction (e.g., opening a malicious GIF). The issue is re...

9.3CVSS6.1AI score0.02965EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
added 2021/12/20 6:27 a.m.7 views

Denial Of Service (DoS)

numpy is vulnerable to denial of service. An attacker can crash the application by specifying the arrays of large dimensions over 32 through the PyArrayNewFromDescrint function in the ctors.c...

5.3CVSS6.4AI score0.01074EPSS
SaveExploits1References2Affected Software2
CNNVD
CNNVD
added 2021/12/14 12:0 a.m.10 views

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. An out-of-bounds read vulnerability exists in Adobe Dimension, which can be exploited by attackers to cause sensitive memory leaks...

4.3CVSS5.6AI score0.0174EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/12/14 12:0 a.m.7 views

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. An out-of-bounds read vulnerability exists in Adobe Dimension, which can be exploited by attackers to cause sensitive memory leaks...

4.3CVSS5.6AI score0.0174EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/12/14 12:0 a.m.16 views

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe Dimension, which can be exploited by attackers to cause arbitrary code to be executed in the context of the current user...

9.3CVSS6AI score0.03144EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/12/14 12:0 a.m.15 views

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. An out-of-bounds read vulnerability exists in Adobe Dimension, which can be exploited by attackers to cause sensitive memory leaks...

4.3CVSS5.6AI score0.01527EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/12/14 12:0 a.m.11 views

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. A memory corruption vulnerability exists in Adobe Dimension, which can be exploited by attackers to cause arbitrary code to be executed in the context of the current user...

9.3CVSS6AI score0.02965EPSS
SaveExploits0References7
Adobe
Adobe
added 2021/12/14 12:0 a.m.556 views

APSB21-116 : Security update available for Adobe Dimension

Adobe has released an update for Adobe Dimension. This update addresses critical, important and moderate vulnerabilities. Successful exploitation could lead to arbitrary code execution and privilege escalation in the context of the current user...

5.5AI score
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2021/12/14 12:0 a.m.16 views

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe Dimension, which can be exploited by attackers to cause arbitrary code to be executed in the context of the current user...

9.3CVSS6AI score0.03144EPSS
SaveExploits0References7
OSV
OSV
added 2021/11/10 7:36 p.m.33 views

GHSA-M539-J985-HCR8 Crash in `max_pool3d` when size argument is 0 or negative

Impact The Keras pooling layers can trigger a segfault if the size of the pool is 0 or if a dimension is negative: python import tensorflow as tf poolsize = 2, 2, 0 layer = tf.keras.layers.MaxPooling3Dstrides=1, poolsize=poolsize inputtensor = tf.random.uniform3, 4, 10, 11, 12, dtype=tf.float32 r...

6.8CVSS5.8AI score0.0023EPSS
SaveExploits1References8
OSV
OSV
added 2021/11/05 9:15 p.m.9 views

PYSEC-2021-826

TensorFlow is an open source platform for machine learning. In affected versions the code for sparse matrix multiplication is vulnerable to undefined behavior via binding a reference to nullptr. This occurs whenever the dimensions of a or b are 0 or less. In the case on one of these is 0, an empt...

7.8CVSS7.1AI score0.00204EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2021/11/05 8:55 p.m.7 views

CVE-2021-41215

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for DeserializeSparse can trigger a null pointer dereference. This is because the shape inference function assumes that the serializesparse tensor is a tensor with positive rank and having 3 ...

5.5CVSS7.2AI score0.00181EPSS
SaveExploits1
PyPA
PyPA
added 2021/11/05 8:15 p.m.8 views

PYSEC-2021-804

TensorFlow is an open source platform for machine learning. In affected versions the Keras pooling layers can trigger a segfault if the size of the pool is 0 or if a dimension is negative. This is due to the TensorFlow's implementation of pooling operations where the values in the sliding window...

5.5CVSS6.9AI score0.0023EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2021/11/05 8:15 p.m.23 views

Design/Logic Flaw

TensorFlow is an open source platform for machine learning. In affected versions TensorFlow allows tensor to have a large number of dimensions and each dimension can be as large as desired. However, the total number of elements in a tensor must fit within an int64t. If an overflow occurs,...

2.1CVSS5.5AI score0.00307EPSS
SaveExploits2References6Affected Software1
OSV
OSV
added 2021/11/05 8:15 p.m.6 views

PYSEC-2021-804

TensorFlow is an open source platform for machine learning. In affected versions the Keras pooling layers can trigger a segfault if the size of the pool is 0 or if a dimension is negative. This is due to the TensorFlow's implementation of pooling operations where the values in the sliding window...

5.5CVSS6.1AI score0.0023EPSS
SaveExploits1References3
OSV
OSV
added 2021/11/05 8:15 p.m.9 views

PYSEC-2021-389

TensorFlow is an open source platform for machine learning. In affected versions the Keras pooling layers can trigger a segfault if the size of the pool is 0 or if a dimension is negative. This is due to the TensorFlow's implementation of pooling operations where the values in the sliding window...

5.5CVSS6.1AI score0.0023EPSS
SaveExploits1References3
Rows per page
Query Builder