Autodesk Navisworks Freedom DWF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Freedom. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

libarchive run_filters Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of libarchive. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the runfilters method...

CVE-2024-12670: Heap-based Buffer Overflow

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-12179: Heap-based Buffer Overflow

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-12669: Heap-based Buffer Overflow

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-49775

A vulnerability has been identified in Opcenter Execution Foundation All versions V2501.0001, Opcenter Intelligence All versions V2501.0001, Opcenter Quality All versions V2512, Opcenter RDnL All versions V2410, SIMATIC PCS neo V4.0 All versions, SIMATIC PCS neo V4.1 All versions V4.1 Update 3,...

CVE-2024-49775

CVE-2024-49775 affects Siemens Opcenter product line and SIMATIC PCS neo, with a heap-based buffer overflow in the integrated UMC component that could allow unauthenticated remote code execution. Affected versions include Opcenter Execution Foundation, Intelligence, Quality (< V2501.0001, <...

CVE-2024-8798: Heap-based Buffer Overflow

No proper validation of the length of user input in olcpindhandler in zephyr/subsys/bluetooth/services/ots/otsclient.c...

CVE-2024-49775: Heap-based Buffer Overflow

A vulnerability has been identified in Opcenter Execution Foundation All versions V2501.0001, Opcenter Intelligence All versions V2501.0001, Opcenter Quality All versions V2512, Opcenter RDnL All versions V2410, SIMATIC PCS neo V4.0 All versions, SIMATIC PCS neo V4.1 All versions V4.1 Update 3,...

CVE-2024-52059: Buffer Copy without Checking Size of Input

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow', Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional Security Plugins allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from...

Siemens Solid Edge SSA-730188 Multiple Vulnerabilities

The version of Siemens Solid Edge installed on the remote Windows host is prior to 224.00.05.04. It is, therefore, affected by multiple vulnerabilities. For more information, consult the vendor advisory. - A vulnerability has been identified in Solid Edge SE2024 All versions V224.0 Update 5. The...

K000148956: c-ares vulnerability CVE-2016-5180

Security Advisory Description Heap-based buffer overflow in the arescreatequery function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service out-of-bounds write or possibly execute arbitrary code via a hostname with an escaped trailing dot. CVE-2016-5180 Impact There ...

CVE-2024-37377: Out-of-bounds Write

A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service...

Amazon Linux 2022 : vim (ALAS2022-2021-001)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2021-001 advisory. A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution. The highest threat from this...

Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2021-005)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2021-005 advisory. vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3903 A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to...

CVE-2024-53957

Substance3D - Painter versions 10.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-52999

Substance3D - Modeler versions 1.14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-53957 Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)

Substance3D - Painter versions 10.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-53957

Substance3D Painter 10.1.1 and earlier are affected by a Heap-based Buffer Overflow that could allow arbitrary code execution in the context of the current user, with exploitation requiring user interaction (victim opens a malicious file). The vulnerability is documented as CVE-2024-53957. Affect...

CVE-2024-53956 Premiere Pro | Heap-based Buffer Overflow (CWE-122)

Premiere Pro versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...