SUSE CVE-2024-56826

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opjdecompress utility. This can lead to an application crash or other undefined behavior...

CVE-2024-47032

In constructtransactionfromcmd of lwisioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-47032

In constructtransactionfromcmd of lwisioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-47032

In constructtransactionfromcmd of lwisioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-47032

The vulnerability CVE-2024-47032 affects the lwis_ioctl.c component, specifically the function construct_transaction_from_cmd. The issue is a heap-based out-of-bounds write that can lead to local elevation of privilege without user interaction. Exploitation details (vectors, affected products/ver...

OSV-2024-1417 Heap-buffer-overflow in cv::PngDecoder::read_from_io

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=386688710 Crash type: Heap-buffer-overflow READ 4 Crash state: cv::PngDecoder::readfromio cv::PngDecoder::readchunk cv::PngDecoder::readHeader...

PT-2025-3337 · Openjpeg +6 · Openjpeg +6

Name of the Vulnerable Software and Affected Versions: OpenJPEG affected versions not specified Description: A flaw was found in the OpenJPEG project, where a heap buffer overflow condition may be triggered when certain options are specified while using the opj decompress utility. This can lead t...

PT-2025-3336 · Openjpeg +7 · Openjpeg +7

Name of the Vulnerable Software and Affected Versions: OpenJPEG project affected versions not specified Description: A flaw was found in the OpenJPEG project, where a heap buffer overflow condition may be triggered when certain options are specified while using the opj decompress utility. This ca...

PT-2025-16899 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 135.0.7049.95 Microsoft Edge Chromium-based versions affected versions not specified Description: A heap buffer overflow in Codecs in Google Chrome on Windows allowed a remote attacker to potentially exploit he...

PT-2025-23000

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious...

PT-2025-36736

Name of the Vulnerable Software and Affected Versions: FFmpeg affected versions not specified Description: A heap-buffer-overflow write exists in the jpeg2000dec component of FFmpeg. This issue could allow a remote attacker to potentially execute code or cause a denial of service through the...

ASB-A-364025411

In gattsprocessprimaryservicereq of gattsr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-41494

Name of the Vulnerable Software and Affected Versions chromium affected versions not specified Description A flaw exists in Google Chrome that could allow attackers to compromise the system. The issue is a heap buffer overflow within the Sync component of Chromium. Recommendations At the moment,...

PT-2025-16201 · Assimp +1 · Assimp +1

Name of the Vulnerable Software and Affected Versions: Open Asset Import Library Assimp version 5.4.3 Description: A critical issue was found in the Open Asset Import Library Assimp, affecting the Assimp::MD3Importer::ValidateSurfaceHeaderOffsets function of the MD3Loader.cpp file in the File...

PT-2025-18234 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 136.0.7103.59 Description: The issue is related to a heap buffer overflow in the HTML component of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML...

CVE-2024-13050

Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the...

Ashlar Vellum Graphite 安全漏洞

Ashlar Vellum Graphite is a CAD modeling software from Ashlar, Inc. A security vulnerability exists in Ashlar Vellum Graphite that stems from a failure to properly validate the length of user-supplied data before copying it to a heap-based buffer. An attacker could exploit the vulnerability to...

AZL-54712 CVE-2024-56737 affecting package grub2 for versions less than 2.06-25

GNU GRUB aka GRUB2 through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem...

Exploit for Heap-based Buffer Overflow in Microsoft

Exploit-PoC-para-CVE-2024-30085 Exploit en Python diseñado par...

CVE-2024-56732 HarfBuzz heap-buffer-overflow on hb_cairo_glyphs_from_buffer

HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hbcairoglyphsfrombuffer function...