Windows Telephony Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network...

PT-2025-10871 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID20.1, ID19.5.2 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, where a...

Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

Microsoft Windows New Technology File System NTFS contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally...

Adobe InDesign < 19.5.3 / 20.0 < 20.2.0 Multiple Vulnerabilities (APSB25-19)

The version of Adobe InDesign installed on the remote Windows host is prior to 19.5.3, 20.2.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-19 advisory. - Out-of-bounds Write CWE-787 potentially leading to Memory Leak CVE-2025-24452, CVE-2025-27178 - Heap-bas...

CVE-2025-2153

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SMdelete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is...

CVE-2025-2152

OSV reports concrete details for CVE-2025-2152 in Open Asset Import Library (Assimp) v5.4.3: the issue is a heap-based buffer overflow in Assimp::BaseImporter::ConvertToUTF8 (BaseImporter.cpp, File Handler). The vulnerability can be exploited remotely and public exploit code is available. A secur...

CVE-2025-2152

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::BaseImporter::ConvertToUTF8 of the file BaseImporter.cpp of the component File Handler. The manipulation leads to heap-based buffer overflow. The...

CVE-2025-2152 Open Asset Import Library Assimp File BaseImporter.cpp ConvertToUTF8 heap-based overflow

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::BaseImporter::ConvertToUTF8 of the file BaseImporter.cpp of the component File Handler. The manipulation leads to heap-based buffer overflow. The...

Linux Distros Unpatched Vulnerability : CVE-2023-47212

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow vulnerability exists in the comment functionality of stb vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-bounds...

Linux Distros Unpatched Vulnerability : CVE-2024-7543

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected...

Linux Distros Unpatched Vulnerability : CVE-2024-7546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected...

Linux Distros Unpatched Vulnerability : CVE-2017-11696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the hashopen function in lib/dbm/src/hash.c in Mozilla Network Security Services NSS allows context-dependent attackers to have...

Linux Distros Unpatched Vulnerability : CVE-2017-11695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the allocsegs function in lib/dbm/src/hash.c in Mozilla Network Security Services NSS allows context-dependent attackers to have...

Linux Distros Unpatched Vulnerability : CVE-2025-0633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based Buffer Overflow vulnerability in iniparserdumpsectionini in iniparser allows attacker to read out of bound memory CVE-2025-0633 Note that Nessus reli...

Linux Distros Unpatched Vulnerability : CVE-2021-39261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A crafted NTFS image can cause a heap-based buffer overflow in ntfscompressedpwrite in NTFS-3G 2021.8.22. CVE-2021-39261 Note that Nessus relies on the presence...

Linux Distros Unpatched Vulnerability : CVE-2021-45949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampleddatafinish called from sampleddatacontinue and interp. CVE-2021-45949 Note...

Linux Distros Unpatched Vulnerability : CVE-2022-48281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., WRITE of size 307203 via a crafted TIFF image...

Linux Distros Unpatched Vulnerability : CVE-2024-32619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Tcopyreopen in H5T.c, resulting in the corruption of the instruction pointer...

Linux Distros Unpatched Vulnerability : CVE-2021-43315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentiall...

Linux Distros Unpatched Vulnerability : CVE-2021-32420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y. CVE-2021-32420 Note that Nessus relies on the presence of the package as...