kernel: out-of-bounds read in fbcon_get_font function

An out-of-bounds OOB memory access flaw was found in fbcongetfont in drivers/video/fbdev/core/fbcon.c in fbcon driver module in the Linux kernel. A bound check failure allows a local attacker with special user privilege to gain access to out-of-bounds memory, leading to a system crash or a leak o...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created data in the font format...

The vulnerability of the Adobe InCopy text creation and editing software lies in the reading of data outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software relates to reading data outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially created data in the font...

The vulnerability of the InCopy text editing software’s built-in font processor allows a hacker to execute arbitrary code.

The vulnerability of the InCopy text editing software’s built-in font processor relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

MAL-2022-3248 Malicious code in fusion-plugin-font-loading (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be24efc5a9c2d3f7b12c25c1c3236c9b0d9c2edeb06ffcfb4d1de013d764d1aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fusion-plugin-font-loading (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be24efc5a9c2d3f7b12c25c1c3236c9b0d9c2edeb06ffcfb4d1de013d764d1aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-font-awesome.no-fa-prefix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cddea9d19e5c049fa86103d3bb9319dec8bf8aad46fa69a9bb23c6730920eee0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2716 Malicious code in ember-font-awesome.no-fa-prefix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cddea9d19e5c049fa86103d3bb9319dec8bf8aad46fa69a9bb23c6730920eee0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7320 Malicious code in yandex-font (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 976f90479fd94cdd954476418038130dab2d6e12253f95817a88fbe33f3432e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yandex-font (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 976f90479fd94cdd954476418038130dab2d6e12253f95817a88fbe33f3432e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3098 Malicious code in font-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c685eb988ef324564c4f7b4400e034d27f821021939cc29d5fcce032290527a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in font-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c685eb988ef324564c4f7b4400e034d27f821021939cc29d5fcce032290527a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-30657 Adobe InCopy Font Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe InCopy versions 17.2 and earlier and 16.4.1 and earlier are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2022-30654 Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe InCopy versions 17.2 and earlier and 16.4.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fi...

CVE-2022-30653 Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe InCopy versions 17.2 and earlier and 16.4.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2022-30651 Adobe InCopy Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe InCopy versions 17.2 and earlier and 16.4.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context o...

CVE-2022-30650 Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe InCopy versions 17.2 and earlier and 16.4.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fi...

CVE-2022-30665 Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe InDesign versions 17.2.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2022-30662 Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe InDesign versions 17.2.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2022-30648 Adobe Illustrator Font Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Illustrator versions 26.0.2 and earlier and 25.4.5 and earlier are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...