2599 matches found
BrokenType
BrokenType BrokenType is a set of tools designed to test the robustness and security of font rasterization software, especially codebases prone to memory corruption issues written in C/C++ and similar languages. It consists of the following components: TrueType program generator - a Python script...
CVE-2016-0040
CVE-2016-0040 This exploit builds upon SMMRootkit's 32Bit project https://github.com/Rootkitsmm/cve-2016-0040 which causes this vulnerability to trigger a BSoD with all 'a's in RCX and 'B's in RAX. It was ported to 64Bit Windows 7 SP1 and doesn't use the "mov rcx+06h, rax" instruction for inital...
Astra Linux – Vulnerability in freerdp3, freerdp2
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurred in the gdiSurfaceToSurface path of the FreeRDP client due to a mismatch between destination rectangle clamping and the actual copy size. A malicious server can...
CVE-2026-85797
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network...
CVE-2026-83934
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...
CVE-2026-83929
Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network...
CVE-2026-83860
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network...
CVE-2026-83651
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network...
CVE-2026-70089
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network...
CVE-2026-69884
Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally...
CVE-2026-69884
A buffer over-read vulnerability exists in Windows GDI . This flaw allows an authorized attacker to perform a local privilege elevation . The vulnerability is associated with CWE-126 . While the documents confirm the impact is high for confidentiality, integrity, and availability, no specific exp...
CVE-2026-83934
A stack-based buffer overflow vulnerability exists in Windows GDI+ , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as HIGH severity with a CVSS 3.1 score of 8.8, as it could impact confidentiality, integrity, and availabilit...
EUVD-2026-100061
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...
CVE-2026-83860
A stack-based buffer overflow vulnerability exists in Windows GDI . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-121 . No specific software versions, internal component files, or remediation detail...
CVE-2026-83651
A vulnerability exists in Windows GDI caused by an out-of-bounds read (CWE-125). This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has a MEDIUM base severity (CVSS 3.1 score of 6.5) and requires user interaction . While the vulnerability is confir...
CVE-2026-85797
An out-of-bounds read vulnerability exists in the Windows GDI component. This flaw allows an unauthorized attacker to disclose information over a network. While the technical root cause is identified as improper input validation (CWE-20) and an out-of-bounds read (CWE-125), specific exploit detai...
CVE-2026-83929
An out-of-bounds write vulnerability exists in Windows GDI . This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability's severity is rated as HIGH with a CVSS 3.1 score of 8.8, requiring user interaction. Documentation does not provide speci...
CVE-2026-70089
A heap-based buffer overflow vulnerability exists in the Windows GDI component. This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is characterized by a HIGH base severity score of 8.8. No specific exploit details or patch versions ar...
