About the security content of tvOS 18.5

About the security content of tvOS 18.5 This document describes the security content of tvOS 18.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

ROS-20250430-06

A vulnerability in the vim text editor function is related to the execution of shell commands via specially crafted tar archives. created tar archives. Exploitation of the vulnerability could allow an attacker to execute arbitrary commands A vulnerability in the vim text editor function is relate...

Important: Red Hat Security Advisory: freetype security update

An update for freetype is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

CVE-2024-40585

An insertion of sensitive information into log file vulnerabilities CWE-532 in FortiManager version 7.4.0, version 7.2.3 and below, version 7.0.8 and below, version 6.4.12 and below, version 6.2.11 and below and FortiAnalyzer version 7.4.0, version 7.2.3 and below, version 7.0.8 and below, versio...

CVE-2024-12671 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-12670 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-12200 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-12200

CVE-2024-12200 affects Autodesk Navisworks family (Desktop/Manage/Freedom/Simulate) via parsing of DWFX files. The root cause is an Out-of-Bounds Write in the DWFX parser, which can cause a crash, data corruption, or arbitrary code execution in the context of the vulnerable process. Public refere...

CVE-2024-12199

CVE-2024-12199 describes an Out-of-Bounds Write vulnerability in Autodesk Navisworks when parsing a malicious DWFX file. Practical impact: crash, data corruption, or arbitrary code execution in the current process. Affected products/versions include Navisworks families prior to 2025.4 (Freedom/Ma...

CVE-2024-12198

CVE-2024-12198 is an out-of-bounds write weakness in Autodesk Navisworks related to DWFX file parsing. The vulnerability affects multiple Navisworks lines (Freedom/Manage/Simulate) and can crash, corrupt data, or allow arbitrary code execution in the current process when a malicious DWFX file is ...

CVE-2024-12197

CVE-2024-12197 describes an Out-of-Bounds Write in Autodesk Navisworks when parsing a malicious DWFX file. The underlying issue is improper validation during DWFX parsing, allowing a crafted file to cause a crash, data corruption, or arbitrary code execution in the context of the current process....

CVE-2024-12194

CVE-2024-12194 is a memory corruption vulnerability in Autodesk Navisworks triggered by parsing DWFX files, enabling arbitrary code execution in the victim process. Affected products include Navisworks variants (Freedom/Manage/Simulate); root cause is DWFX parsing memory-management fault. The vul...

CVE-2024-12194 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2024-12193

CVE-2024-12193 concerns Autodesk Navisworks family (Navisworks/Freedom/Simulate/Manage) with a DWFX file parsing flaw that can cause an Out-of-Bounds Write. The vulnerability arises during parsing of DWFX data and, depending on the source, may lead to crash, data corruption, or arbitrary code exe...

CVE-2024-12178

CVE-2024-12178 describes a memory corruption vulnerability in Autodesk Navisworks when parsing a malicious DWFX file. The issue can allow arbitrary code execution in the context of the affected process. Reported as a local vulnerability with low attack complexity and requiring user interaction (p...

CVE-2024-12178 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2024-11422 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-11422 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

Siemens Simcenter Femap

SUMMARY Simcenter Femap contains multiple memory corruption vulnerabilities that could be triggered when the application reads files in BDF file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead...

CVE-2023-38619

Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...