CVE-2021-21840

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input used to process an atom using the “saio” FOURCC code cause an integer overflow due to unchecked arithmetic resulti...

CVE-2021-21840

GPAC Project on Advanced Content (GPAC) library v1.0.1 contains a vulnerability in MPEG-4 decoding. A crafted MPEG-4 input targeting the saio FOURCC can trigger an integer overflow, leading to a heap-based buffer overflow and memory corruption. The issue is exploitable when a user opens a malicio...

CVE-2021-21836

CVE-2021-21836 concerns the GPAC Project on Advanced Content library (GPAC) v1.0.1. The vulnerability is a heap-based buffer overflow triggered by an exploitable integer overflow in the MPEG-4 decoding path when processing the ctts atom/FOURCC, due to unchecked arithmetic. This can lead to memory...

CVE-2021-21836

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input using the “ctts” FOURCC code can cause an integer overflow due to unchecked arithmetic resulting in a heap-based...

CVE-2021-21836

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input using the “ctts” FOURCC code can cause an integer overflow due to unchecked arithmetic resulting in a heap-based...

CVE-2021-21834

GPAC Project on Advanced Content library v1.0.1 contains an exploitable integer overflow in the MPEG-4 decoding path (co64 atom) that leads to a heap-based buffer overflow and memory corruption. An attacker can convince a user to open a crafted MPEG-4 video to trigger this vulnerability. Public a...

CVE-2021-21835

The CVE-2021-21835 issue affects the GPAC Project on Advanced Content library (GPAC) 1.0.1, specifically in the MPEG-4 decoding path. The vulnerability is an integer overflow in the atom decoded for the csgp FOURCC, caused by unchecked arithmetic, which leads to a heap-based buffer overflow and m...

CVE-2021-21835

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when decoding the atom associated with the “csgp” FOURCC can cause an integer overflow due to unchecked arithmetic...

CVE-2021-21835

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when decoding the atom associated with the “csgp” FOURCC can cause an integer overflow due to unchecked arithmetic...

Zoom Client Heap Based Buffer Overflow (ZSB-22003)

Zoom Client is prone to a heap based buffer overflow vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Heap overflow

Adobe Animate version 21.0.6 and earlier is affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

CVE-2021-28629

Adobe Animate is affected in versions prior to 21.0.7 (notably 21.0.6 and earlier) by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could trigger arbitrary code execution in the context of the current user, but exploitation requires the user to open a malicious file. The...

Heap overflow

Adobe After Effects version 18.2 and earlier is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...

Heap overflow

Adobe After Effects version 18.2 and earlier is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-28608

CVE-2021-28608 affects Adobe After Effects 18.2 and earlier. A heap-based buffer overflow occurs when parsing a specially crafted file, allowing an unauthenticated, context-user arbitrary code execution, with exploitation requiring user interaction (victim opens a malicious file). Remediation: ap...

CVE-2021-28610

CVE-2021-28610 affects Adobe After Effects 18.2 and earlier. The vulnerability is a heap-based buffer overflow that occurs while parsing a specially crafted file, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious...

CVE-2021-28603

CVE-2021-28603 affects Adobe After Effects 18.2 and earlier. It is a heap-based buffer overflow triggered while parsing a specially crafted file, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affec...

CVE-2021-32263

CVE-2021-32263 affects the ok-file-formats project. The vulnerability is a heap-based buffer overflow in the ok_csv_circular_buffer_read function within ok_csv.c, with affected releases up to 2021-04-29. The initial entry provides no explicit exploitation details, affected versions beyond the dat...

Debian DLA-2748-1 : tnef - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2748 advisory. - In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat application/ms-tnef...

CVE-2020-18778

CVE-2020-18778 describes a heap-based buffer over-read in Libav 12.3, specifically in vc1_decode_p_mb_intfi of vc1_block.c. This flaw can allow a denial-of-service when processing a crafted VC-1 file. The available sources consistently identify the affected component and the nature of the vulnera...