PDF-XChange Editor Heap Buffer Overflow Vulnerability (CNVD-2024-33586)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

PDF-XChange Editor Heap Buffer Overflow Vulnerability

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

OSV-2024-664 Heap-buffer-overflow in gf_dash_group_get_template

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70342 Crash type: Heap-buffer-overflow WRITE 1 Crash state: gfdashgroupgettemplate gfdashresolveurl gfdashdownloadinitsegment...

EulerOS Virtualization 2.10.0 : libtiff (EulerOS-SA-2024-1985)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libtiff 4.5.0 is vulnerable to Buffer Overflow in uvencode when libtiff reads a corrupted little-endian TIFF file and specifies the...

EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2024-1939)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libtiff 4.5.0 is vulnerable to Buffer Overflow in uvencode when libtiff reads a corrupted little-endian TIFF file and specifies the output to be...

RHEL 7 : openexr (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - OpenEXR: Heap-buffer-overflow in Imf25::copyIntoFrameBuffer CVE-2021-23169 - An integer overflow leading ...

RHEL 8 : openexr (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - OpenEXR: Heap-buffer-overflow in Imf25::copyIntoFrameBuffer CVE-2021-23169 - A heap-based buffer overflow...

Microsoft Edge (Chromium) < 125.0.2535.67 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 125.0.2535.67. It is, therefore, affected by multiple vulnerabilities as referenced in the May 16, 2024 advisory. - Use after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to...

OSV-2024-638 Heap-buffer-overflow in ih264d_format_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68807 Crash type: Heap-buffer-overflow WRITE Crash state: ih264dformatconvert ih264ddecodepicturethread...

OSV-2024-637 Heap-buffer-overflow in ih264d_format_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69682 Crash type: Heap-buffer-overflow WRITE Crash state: ih264dformatconvert isvcdvideodecode isvcdapifunction...

OSV-2024-634 Heap-buffer-overflow in htmlCurrentChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70297 Crash type: Heap-buffer-overflow READ 1 Crash state: htmlCurrentChar htmlParseCharData htmlParseContentInternal...

PT-2024-40806 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue has been identified, which can cause a crash. The crash occurs in the htmlParseCharData and htmlParseContentInternal...

PT-2024-40810 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap buffer overflow issue is reported, which can cause a crash. The crash occurs in the ih264d format convert and ih264d decode picture thread...

CBL Mariner 2.0 Security Update: fluent-bit (CVE-2024-34250)

The version of fluent-bit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-34250 advisory. - A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which...

SUSE-SU-2024:2429-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: - CVE-2023-2137: Fixed heap buffer overflow bsc1210660...

OSV-2024-627 Heap-buffer-overflow in gf_hevc_parse_nalu_bs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70105 Crash type: Heap-buffer-overflow READ 1 Crash state: gfhevcparsenalubs gfinspectdumpnaluinternal inspectprocess...

D-Link DAP-1360 Heap Buffer Overflow Vulnerability

The D-Link DAP-1360 is a router from China-based AUO D-Link. The D-Link DAP-1360 suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

D-Link DAP-1360 Heap Buffer Overflow Vulnerability (CNVD-2024-33373)

The D-Link DAP-1360 is a router from China-based AUO D-Link. The D-Link DAP-1360 suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

Adobe InDesign Heap Buffer Overflow Vulnerability (CNVD-2024-34093)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on the system or cause the application to crash...

Adobe InDesign Heap Buffer Overflow Vulnerability

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...