26808 matches found
hplip: heap-based buffer overflow can lead to remote code execution
A flaw was found in HPLIP. A heap-based buffer overflow could potentially allow an attacker to achieve code execution, escalate privileges, cause a denial of service, disclose sensitive information, or perform unauthorized file modifications under certain conditions...
CVE-2017-20286
DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette in ilgif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images. Attackers can supply a crafted two-frame GIF whose second frame uses disposal method 1 with a local colour table, writing ...
DEBIAN-CVE-2017-20286
DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette in ilgif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images. Attackers can supply a crafted two-frame GIF whose second frame uses disposal method 1 with a local colour table, writing ...
CVE-2017-20286
DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette in ilgif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images. Attackers can supply a crafted two-frame GIF whose second frame uses disposal method 1 with a local colour table, writing ...
EUVD-2017-19019
DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette in ilgif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images. Attackers can supply a crafted two-frame GIF whose second frame uses disposal method 1 with a local colour table, writing ...
CVE-2017-20286
DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette in ilgif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images. Attackers can supply a crafted two-frame GIF whose second frame uses disposal method 1 with a local colour table, writing ...
CLEANSTART-2026-PZ30924 Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec
Security vulnerability affects the gst-plugins-good package. Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec...
CLEANSTART-2026-LU26408 Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec
Security vulnerability affects the gst-plugins-good package. Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec...
CLEANSTART-2026-EW60545 heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2_merged_upsample_internal() function of jdmrgext
Security vulnerability affects the libjpeg-turbo package. A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2mergedupsampleinternal function of jdmrgext...
PT-2026-113856
Name of the Vulnerable Software and Affected Versions Junos OS affected versions not specified Junos OS Evolved affected versions not specified Description A Heap-based Buffer Overflow occurs in the secure-dot1xd process. This allows an unauthenticated adjacent network attacker to execute code wi...
CVE-2017-20286
DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette in ilgif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images. Attackers can supply a crafted two-frame GIF whose second frame uses disposal method 1 with a local colour table, writing ...
Adobe Photoshop 26.x < 26.11.8 / 27.x < 27.11 Multiple Vulnerabilities (APSB26-158)
The version of Adobe Photoshop installed on the remote Windows host is prior to 26.11.8/27.11. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-158 advisory. - Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrar...
Security Updates for Microsoft Office Products (October 2026) (macOS)
The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the october-14-2026 advisory. - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. CVE-2026-70215, CVE-2026-8814...
CVE-2026-101950: Heap-based Buffer Overflow
A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured f...
PT-2026-113804
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX Series affected versions not specified Description A Heap-based Buffer Overflow occurs in the SVR component. This allows an unauthenticated network attacker to cause a denial of service and potentially compromi...
PT-2026-113789
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS affected versions not specified Juniper Networks Junos OS Evolved affected versions not specified Description A Heap-based Buffer Overflow occurs in the eventd process. This issue allows an unprivileged local attacker...
PT-2026-113925
šØ CVE-2026-102175 A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection to execute code as root or cause deni...
PT-2026-114151
Name of the Vulnerable Software and Affected Versions FreeRDP versions 2.0.0 through 3.31.0 Description A heap-based buffer overflow exists in the freerdp dsp decode mp3 function when the software is built with WITH LAME=ON and WITH DSP FFMPEG=OFF. The issue occurs because the right-channel PCM...
UBUNTU-CVE-2017-20286
DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette in ilgif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images. Attackers can supply a crafted two-frame GIF whose second frame uses disposal method 1 with a local colour table, writing ...
CVE-2026-110837: Heap-based Buffer Overflow
FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...