CVE-2025-2337

A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue affects the function MatVarPrint of the file src/mat.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and m...

CVE-2025-2309

A vulnerability has been found in HDF5 1.14.6 and classified as critical. This vulnerability affects the function H5Tbitcopy of the component Type Conversion Logic. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclos...

Adobe Substance 3D Designer Heap Buffer Overflow Vulnerability (CNVD-2025-05199)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. A heap buffer overflow vulnerability exists in Adobe Substance 3D Designer 14.1 and earlier versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Substance 3D Designer Heap Buffer Overflow Vulnerability (CNVD-2025-05207)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe InDesign Heap Buffer Overflow Vulnerability (CNVD-2025-05250)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. A heap buffer overflow vulnerability exists in Adobe InDesign ID20.1, ID19.5.2 and earlier versions, which can be exploited by an attacker to cause arbitrary code execution...

Adobe InDesign Heap Buffer Overflow Vulnerability (CNVD-2025-05247)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Substance 3D Designer Heap Buffer Overflow Vulnerability (CNVD-2025-05210)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Substance 3D Designer Heap Buffer Overflow Vulnerability (CNVD-2025-05204)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. A heap buffer overflow vulnerability exists in Adobe Substance 3D Designer 1.15.0 and earlier versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Substance 3D Designer Heap Buffer Overflow Vulnerability (CNVD-2025-05211)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer heap buffer overflow vulnerability can be exploited by an attacker to execute arbitrary code in the context of the current user...

CVE-2025-26634

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network...

Updated opensc packages fix security vulnerabilities

Heap buffer overflow in openpgp driver when generating key. CVE-2024-8443 Usage of uninitialized values in libopensc and pkcs15init. CVE-2024-45615 Uninitialized values after incorrect check or usage of apdu response values in libopensc. CVE-2024-45616 Uninitialized values after incorrect or...

MGASA-2025-0096 Updated opensc packages fix security vulnerabilities

Heap buffer overflow in openpgp driver when generating key. CVE-2024-8443 Usage of uninitialized values in libopensc and pkcs15init. CVE-2024-45615 Uninitialized values after incorrect check or usage of apdu response values in libopensc. CVE-2024-45616 Uninitialized values after incorrect or...

CVE-2024-12858

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2025-22880...

openSUSE Security Advisory (SUSE-SU-2025:0821-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-47316

Name of the Vulnerable Software and Affected Versions rsync affected versions not specified Description A specially crafted client, acting as the receiver during an rsync file transfer, can cause a read error due to accessing memory outside the intended boundaries. This occurs because of a negati...

SUSE SLES12 Security Update : iniparser (SUSE-SU-2025:0845-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0845-1 advisory. - CVE-2025-0633: string copy into buffer without previous size validation leads to heap buffer overflow in iniparserdumpsectionini of iniparser...

SUSE-SU-2025:0845-1 Security update for iniparser

This update for iniparser fixes the following issues: - CVE-2025-0633: string copy into buffer without previous size validation leads to heap buffer overflow in iniparserdumpsectionini of iniparser bsc1237377...

CVE-2025-24048

Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2025-21180

Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally...

CVE-2025-24048

CVE-2025-24048 is a heap-based buffer overflow in the Windows Hyper-V role that enables a locally authenticated attacker to elevate privileges. Public records confirm this is associated with Windows Hyper-V and is rated high severity with local exploitability and total impact to confidentiality, ...