41 matches found
Autodesk 3ds Max 2026.x < 2026.3.4 / 2027.x < 2027.2.0 Multiple Vulnerabilities (ADSK-SA-2026-0014)
The version of Autodesk 3ds Max installed on the remote Windows host is 2026.x prior to 2026.3.4, or 2027.x prior to 2027.2.0. It is, therefore, affected by multiple vulnerabilities: - A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerabilit...
CVE-2026-7455
A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...
CVE-2026-7455
CVE-2026-7455 is an Out-of-Bounds Write vulnerability in Autodesk 3ds Max triggered by parsing a maliciously crafted FLT file . A local attacker with user interaction can exploit this to cause a crash, data corruption, or arbitrary code execution in the context of the current process. The CVSS v3...
CVE-2026-7455 FLT File Parsing Out-of-Bounds Write Vulnerability in Autodesk 3ds Max
A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...
CVE-2026-7455 FLT File Parsing Out-of-Bounds Write Vulnerability in Autodesk 3ds Max
A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...
EUVD-2026-65152
A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...
PT-2026-81041
A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...
CVE-2026-7455: Out-of-bounds Write
A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...
Malicious code in @zalastax/nolb-flt (npm)
The package @zalastax/nolb-flt was found to contain malicious code...
MAL-2025-11484 Malicious code in @zalastax/nolb-flt (npm)
The package @zalastax/nolb-flt was found to contain malicious code...
UBUNTU-CVE-2024-56707
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2mboxgetrsp errors in otx2dmacflt.c Add error pointer checks after calling otx2mboxgetrsp...
The vulnerability of the IPPP82.FLT module of the Corel Presentations presentation preparation and viewing software allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the IPPP82.FLT module in the Corel Presentations preparation and presentation software relates to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information using a specially crafted PPT fi...
CVE-2022-45889: Improper Neutralization of Special Elements used in an SQL Command
Planet eStream before 6.72.10.07 allows a remote attacker who is a publisher or admin to obtain access to all records stored in the database, and achieve the ability to execute arbitrary SQL commands, via Search the StatisticsResults.aspx flt parameter...
PT-2022-27667 · Unknown · Planet Estream
Name of the Vulnerable Software and Affected Versions: Planet eStream versions prior to 6.72.10.07 Description: The issue allows a remote attacker, who is a publisher or admin, to obtain access to all records stored in the database and execute arbitrary SQL commands via Search, specifically throu...
Design/Logic Flaw
IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue...
CVE-2021-38105
CVE-2021-38105 : In Corel Presentations 2020 (version 20.0.0.200), the parser component IPPP82.FLT is affected by an out-of-bounds read when processing a crafted PowerPoint file. An unauthenticated attacker could potentially access unauthorized system memory in the context of the current user. Ex...
CVE-2021-38105
IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue...
CVE-2021-38102
CVE-2021-38102 affects Corel Presentations 2020 (version 20.0.0.200). The vulnerability is an Out-of-bounds Read when parsing a crafted PPT file, allowing memory access in the context of the current user. Exploitation requires user interaction (victim opens a malicious PPT). No remediation detail...
Design/Logic Flaw
IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...
CVE-2021-38103
CVE-2021-38103 affects Corel Presentations 2020 (20.0.0.200). The vulnerable component is IBJPG2.FLT, with an out-of-bounds write during crafted PPT parsing. An unauthenticated attacker could achieve arbitrary code execution in the user’s context, and exploitation requires user interaction (victi...