13 matches found
EUVD-2026-42590
A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsubreadidx of the file /src/mediatools/vobsub.c of the component MP4Box. Executing a manipulation of the argument numlangs can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a resource management vulnerability. This vulnerability stemmed from the reuse of resources after they were released in the ANGLE framework. It could allow remote attackers to execu...
[SECURITY] Fedora 42 Update: qt6-qtsvg-6.9.3-1.fc42
Scalable Vector Graphics SVG is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displaying SVG drawings in widgets and on other paint devices...
The vulnerability of the Intel GPA Framework installer and the Intel Graphics Performance Analyzer tool set allows a perpetrator to enhance their privileges.
The vulnerability of Intel GPA Framework installer and the Intel Graphics Performance Analyzer tool set is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
PT-2024-2747
Name of the Vulnerable Software and Affected Versions Qt versions prior to 5.15.17 Qt versions 6.x prior to 6.2.12 Qt versions 6.3.x through 6.5.x prior to 6.5.5 Qt versions 6.6.x prior to 6.6.2 Description A buffer overflow and application crash can occur via a crafted KTX image file. The issue ...
USN-5314-1 firefox vulnerabilities
A use-after-free was discovered when removing an XSLT parameter in some circumstances. If a user were tricked into opening a specially crafted website, an attacker could exploit this to cause a denial of service, or execute arbitrary code. CVE-2022-26485 A use-after-free was discovered in the...
qt5-qtbase: QImage allocation failure in qgifhandler
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault...
Oracle VirtualBox Multiple Guest to Host Escape Vulnerabilities(CVE-2018-2698)
Vulnerabilities summary The following advisory describes two 2 guest to host escape found in Oracle VirtualBox version 5.1.30, and VirtualBox version 5.2-rc1. Credit An independent security researcher, Niklas Baumstark, has reported this vulnerability to Beyond Security’s SecuriTeam Secure...
Oracle VirtualBox < 5.1.30 / < 5.2-rc1 - Guest to Host Escape Vulnerability
Exploit for multiple platform in category local exploits SSD Advisory – Oracle VirtualBox Multiple Guest to Host Escape Vulnerabilities Source: https://blogs.securiteam.com/index.php/archives/3649 Vulnerabilities summary The following advisory describes two 2 guest to host escape found in Oracle...
Oracle VirtualBox 5.1.30 5.2-rc1 - Guest to Host Escape
Oracle VirtualBox 5.1.30 5.2-rc1 - Guest to Host Escape SSD Advisory – Oracle VirtualBox Multiple Guest to Host Escape Vulnerabilities Source: https://blogs.securiteam.com/index.php/archives/3649 Vulnerabilities summary The following advisory describes two 2 guest to host escape found in Oracle...
Oracle VirtualBox < 5.1.30 / < 5.2-rc1 - Guest to Host Escape
SSD Advisory – Oracle VirtualBox Multiple Guest to Host Escape Vulnerabilities Source: https://blogs.securiteam.com/index.php/archives/3649 Vulnerabilities summary The following advisory describes two 2 guest to host escape found in Oracle VirtualBox version 5.1.30, and VirtualBox version 5.2-rc1...
Oracle VirtualBox Guest To Host Escape
SSD Advisory a Oracle VirtualBox Multiple Guest to Host Escape Vulnerabilities Source: https://blogs.securiteam.com/index.php/archives/3649 Vulnerabilities summary The following advisory describes two 2 guest to host escape found in Oracle VirtualBox version 5.1.30, and VirtualBox version 5.2-rc1...
UBUNTU-CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a crafted GIF image...