CVE-2025-0903: Heap-based Buffer Overflow

PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

PT-2025-6271

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID20.0, ID19.5.1 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

CVE-2025-21123: Heap-based Buffer Overflow

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21418: Heap-based Buffer Overflow

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

CVE-2025-21184: Heap-based Buffer Overflow

Windows Core Messaging Elevation of Privileges Vulnerability...

CVE-2025-21368: Heap-based Buffer Overflow

Microsoft Digest Authentication Remote Code Execution Vulnerability...

CVE-2025-21190: Heap-based Buffer Overflow

Windows Telephony Service Remote Code Execution Vulnerability...

CVE-2025-21371: Heap-based Buffer Overflow

Windows Telephony Service Remote Code Execution Vulnerability...

CVE-2025-21407: Heap-based Buffer Overflow

Windows Telephony Service Remote Code Execution Vulnerability...

CVE-2025-21390: Heap-based Buffer Overflow

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2025-21369: Heap-based Buffer Overflow

Microsoft Digest Authentication Remote Code Execution Vulnerability...

CVE-2025-21410: Heap-based Buffer Overflow

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2025-21414: Heap-based Buffer Overflow

Windows Core Messaging Elevation of Privileges Vulnerability...

CVE-2025-1176: Heap-based Buffer Overflow

A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function bfdelfgcmarkrsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather...

Adobe InDesign < 19.5.2 / 20.0 < 20.1.0 Multiple Vulnerabilities (APSB25-01) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 19.5.2, 20.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-01 advisory. - InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow Wrap or...

NVIDIA nvJPEG2000 Ndecomp heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2024-2108 NVIDIA nvJPEG2000 Ndecomp heap-based buffer overflow vulnerability February 11, 2025 CVE Number CVE-2024-0144 SUMMARY A heap-based buffer overflow vulnerability exists in the Ndecomp field handling of NVIDIA nvJPEG2000 0.8.0. A specially crafted JPEG2000...

CVE-2025-1052: Heap-based Buffer Overflow

Mintty Sixel Image Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mintty. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-32623)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32623 advisory. - HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VMarrayfill in H5VM.c called from...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-32612)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32612 advisory. - HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HLfldeserialize in H5HLcache.c,...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-32621)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32621 advisory. - HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HGread in H5HG.c called from...