CVE-2024-50401

Summary: CVE-2024-50401 is a use of externally-controlled format string vulnerability affecting QNAP QTS and QuTS hero. Affected components/versions (as stated): QTS 5.2.1.2930 build 20241025 and later; QuTS hero h5.2.1.2929 build 20241025 and later. Root cause/impact (as described): allows remot...

CVE-2024-50401 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...

OESA-2024-2455 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and...

OESA-2024-2457 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and...

CVE-2024-50401: Use of Externally-Controlled Format String

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...

CVE-2024-50400: Use of Externally-Controlled Format String

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...

CVE-2024-50397: Use of Externally-Controlled Format String

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to obtain secret data or modify memory. We have already fixed the vulnerability i...

CVE-2024-50399: Use of Externally-Controlled Format String

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...

CVE-2024-50398: Use of Externally-Controlled Format String

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...

CVE-2024-50396: Use of Externally-Controlled Format String

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QT...

IrfanView buffer error vulnerability

IrfanView is an image viewer by the individual developer Irfan Skiljan. It supports image browsing, image editing, image format conversion and more. IrfanView suffers from a buffer error vulnerability that stems from the AWD file parsing feature containing an out-of-bounds write issue. An attacke...

Tungsten Automation Power PDF Resource Management Error Vulnerability

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation, Inc. Tungsten Automation Power PDF suffers from a resource management error vulnerability that stems from the parsing of PDF files containing a post-release reuse issue. An attacker could...

Tungsten Automation Power PDF buffer error vulnerability

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation. A buffer error vulnerability exists in Tungsten Automation Power PDF, which stems from a PDF file parsing issue that includes an out-of-bounds read. An attacker who exploited this...

Tungsten Automation Power PDF buffer error vulnerability

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation. Tungsten Automation Power PDF suffers from a buffer error vulnerability that stems from the parsing of GIF files that contain an out-of-bounds read issue. An attacker exploiting this...

Tungsten Automation Power PDF buffer error vulnerability

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation. A buffer error vulnerability exists in Tungsten Automation Power PDF, which stems from a PDF file parsing issue that includes an out-of-bounds read. An attacker who exploited this...

Tungsten Automation Power PDF security vulnerability

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation, Inc. A security vulnerability exists in Tungsten Automation Power PDF, which stems from a heap-based buffer overflow problem contained in the parsing of PDF files. An attacker exploiting...

Tungsten Automation Power PDF buffer error vulnerability

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation. Tungsten Automation Power PDF suffers from a buffer error vulnerability that stems from the parsing of PDF files containing a memory corruption issue. An attacker could exploit this...

Tungsten Automation Power PDF buffer error vulnerability

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation. Tungsten Automation Power PDF suffers from a buffer error vulnerability that stems from the parsing of BMP files containing an out-of-bounds write issue. An attacker exploiting this...

Tungsten Automation Power PDF security vulnerability

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation, Inc. A security vulnerability exists in Tungsten Automation Power PDF, which stems from a heap-based buffer overflow problem contained in the parsing of PDF files. An attacker exploiting...

Tungsten Automation Power PDF buffer error vulnerability

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation. Tungsten Automation Power PDF suffers from a buffer error vulnerability that stems from a PDF file parsing issue that includes an out-of-bounds write problem. An attacker could exploit th...