ROS-2-1811

2.1811 Mozilla Firefox browser vulnerability CVE-2021-29970, CVE-2021-29976 1. Vulnerability description: CVE-2021-29970 A vulnerability in the Mozilla Firefox browser, is related to a release error in accessibility functions when processing HTML content. Exploitation of the vulnerability could...

exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp

A flaw was found in exiv2. A flawed bounds checking in the jp2Image.cpp:doWriteMetadata function leads to a heap-based buffer overflow. This flaw allows an attacker who can provide a malicious image to an application using the exiv2 library, to write data out of bounds and potentially execute cod...

Delta Electronics DIAScreen

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: DIAScreen Vulnerabilities: Type Confusion, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities could crash the device being accessed and may allow remote code...

MGASA-2021-0368 Updated lib3mf packages fix security vulnerability

A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP functionality of 3MF Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability CVE-2021-21772. A new package 'act' is...

Siemens JT2Go and Teamcenter Visualization out-of-bounds write vulnerability (CNVD-2021-51456)

Siemens Jt2go is a JT file viewer.Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios. An out-of-bounds write vulnerability exists in Siemens JT2Go versions prior to 13.2 and Teamcenter Visualization versions prior to 13.2. The...

Siemens JT2Go and Teamcenter Visualization Out-of-Bounds Read Vulnerability (CNVD-2021-51452)

Siemens Jt2go is a JT file viewer.Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios. An out-of-bounds read vulnerability exists in Siemens JT2Go versions prior to 13.2 and Teamcenter Visualization versions prior to 13.2. The...

Siemens JT2Go and Teamcenter Visualization out-of-bounds write vulnerability (CNVD-2021-51460)

Siemens Jt2go is a JT file viewer.Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios. An out-of-bounds write vulnerability exists in Siemens JT2Go versions prior to 13.2 and Teamcenter Visualization versions prior to 13.2. The...

CVE-2021-34293

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The Gifloader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files. This could result in an out of bounds write past the end of an...

PT-2021-11568 · Prusa +1 · Prusaslicer +1

Name of the Vulnerable Software and Affected Versions: PrusaSlicer versions 2.2.0 through Master commit 4b040b856 Description: An out-of-bounds write issue exists in the stl fix normal directions functionality. A specially crafted AMF file can lead to code execution. An attacker can provide a...

PT-2021-22826 · Autodesk · Autodesk Design Review

Name of the Vulnerable Software and Affected Versions: Autodesk Design Review affected versions not specified Description: The issue arises when a maliciously crafted dwf or .pct file is consumed through the DesignReview.exe application, leading to a memory corruption vulnerability due to a read...

USN-5005-1 djvulibre vulnerability

It was discovered that DjVuLibre incorrectly handled certain djvu files. An attacker could possibly use this issue to execute arbitrary code or cause a crash...

Huawei HarmonyOS 代码注入漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS Phones and Tablets A code injection vulnerability exists in some Huawei products. Successful exploitation of this vulnerability may result i...

PT-2021-7930 · Adobe · Media Encoder

Name of the Vulnerable Software and Affected Versions: Adobe Media Encoder versions 15.2 and earlier Description: The issue is related to an out-of-bounds read that could lead to the disclosure of sensitive memory. This could allow an attacker to bypass mitigations such as ASLR. Exploitation...

CVE-2021-31506

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

PowerISO Buffer Overflow Vulnerability

PowerISO is a powerful CD/DVD/BD image file processing tool from PowerISO that can open, extract, burn, create, edit, compress, encrypt, split and convert ISO files, and mount ISO files using internal virtual drives. PowerISO suffers from a buffer overflow vulnerability that originates from a...

Opentext OpenText Brava! Information Disclosure Vulnerability

Opentext OpenText Brava! is a browser-based universal document viewer from Opentext Canada. The product supports viewing, annotating, and editing many types of documents.Desk is a writing, blogging, and note-taking application for individual developers. A security vulnerability exists in OpenText...

OpenText Brava! Desktop out-of-bounds write vulnerability (CNVD-2021-42325)

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. An out-of-bounds write vulnerability exists in the parsing of DWF files in OpenText Brava! Desktop. The vulnerability stems from a lack of proper validation of...

Mozilla Firefox Cross-Site Scripting Vulnerability (CNVD-2021-39679)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A cross-site scripting vulnerability exists in Firefox 3.6.24 and versions between 4.x and 7. An attacker can exploit this vulnerability to inject arbitrary web script or HTML to execute client-side co...

OpenText Brava! Desktop out-of-bounds write vulnerability (CNVD-2021-42329)

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. An out-of-bounds write vulnerability exists in the parsing of DXF files in OpenText Brava! Desktop. The vulnerability stems from a lack of proper validation of...

OpenText Brava! Desktop out-of-bounds write vulnerability (CNVD-2021-42326)

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. An out-of-bounds write vulnerability exists in the parsing of DWF files in OpenText Brava! Desktop. The vulnerability stems from a lack of proper validation of...