CVE-2025-0753 Axiomatic Bento4 mp42aac ReadPartial heap-based overflow

A vulnerability classified as critical was found in Axiomatic Bento4 up to 1.6.0. This vulnerability affects the function AP4StdcFileByteStream::ReadPartial of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been...

CVE-2025-0753

CVE-2025-0753 affects Axiomatic Bento4 up to 1.6.0, specifically the AP4_StdcFileByteStream::ReadPartial function of the mp42aac component. The issue is a heap-based buffer overflow that can be triggered remotely, with reports that the exploit has been disclosed publicly. Multiple feeds corrobora...

CVE-2025-0751

CVE-2025-0751 affects Axiomatic Bento4 up to v1.6.0, specifically the AP4_BitReader::ReadBits function in mp42aac. The issue is a heap-based buffer overflow that can be leveraged remotely over a network, with the exploit disclosed publicly. The connected documents confirm the vulnerability detail...

CBL Mariner 2.0 Security Update: rsync (CVE-2024-12084)

The version of rsync installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-12084 advisory. - A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of...

CVE-2024-50698

SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to heap-based buffer overflow due to bounds checks of the MQTT message content...

Microsoft Access Remote Code Execution Vulnerability (CNVD-2025-02826)

Microsoft Access is a database management system widely used to create and manage database applications. A remote code execution vulnerability exists in Microsoft Access that originates from a Heap-based Buffer Overflow. An attacker could exploit this vulnerability to execute arbitrary code via...

CVE-2024-50698

CVE-2024-50698 affects SunGrow WiNet-SV200.001.00.P027 and earlier: the vulnerability is a heap-based buffer overflow caused by insufficient bounds checks on MQTT message content. This could potentially allow remote code execution on affected devices. Connected advisories corroborate a need for a...

CVE-2024-50698

SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to heap-based buffer overflow due to bounds checks of the MQTT message content...

Adobe Substance 3D Stager 3.1.0 Multiple Vulnerabilities (APSB25-03)

The version of Adobe Substance 3D Stager installed on the remote host is prior to 3.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-03 advisory. - Substance3D - Stager versions 3.0.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability th...

What has become known about the Elevation of Privilege – Windows Common Log File System Driver (CVE-2024-49138) vulnerability from the December Microsoft Patch Tuesday a month later?

What has become known about the Elevation of Privilege - Windows Common Log File System Driver CVE-2024-49138 vulnerability from the December Microsoft Patch Tuesdaya month later? Almost nothing. This is a vulnerability in a standard Windows component, available in all versions starting with...

CVE-2025-21139

Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21139

CVE-2025-21139 affects Adobe Substance 3D Designer versions 14.0 and earlier. A Heap-based Buffer Overflow could allow arbitrary code execution in the context of the current user when a victim opens a specially crafted file, with user interaction required. The vulnerability is documented across m...

CVE-2025-21139 Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21137 Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21137 Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21137

Affected product : Substance3D Designer. Vulnerable versions : 14.0 and earlier. Issue type / root cause : Heap-based buffer overflow in Substance3D Designer can lead to arbitrary code execution in the context of the current user. Attack vector / prerequisites : Exploitation requires user interac...

CVE-2025-21129

Substance3D - Stager versions 3.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21129 Substance3D - Stager | Heap-based Buffer Overflow (CWE-122)

Substance3D - Stager versions 3.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

Microsoft Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer overflow vulnerability that allows a local attacker to gain SYSTEM privileges...

CVE-2025-23016

FastCGI fcgi2 aka fcgi 2.x through 2.4.4 has an integer overflow and resultant heap-based buffer overflow via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c...