CVE-2022-24096

Adobe After Effects versions 22.2 and earlier, and 18.4.4 and earlier, are affected by a heap-based buffer overflow that could allow arbitrary code execution when a user opens a crafted file. Exploitation requires user interaction. remediation: upgrade to 18.4.5 or 22.2.1 (or later) per APSB22-17.

Debian: Security Advisory (DLA-2944-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AlmaLinux 8 : kernel (ALSA-2022:0188)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:0188 advisory. - A heap-based buffer overflow flaw was found in the way the legacyparseparam function in the Filesystem Context functionality of the Linux kernel verifie...

CVE-2022-24096: Heap-based Buffer Overflow

Adobe After Effects versions 22.2 and earlier and 18.4.4 and earlier are affected by an Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

Autodesk AutoCAD PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PC...

AlmaLinux 8 : vim (ALSA-2022:0366)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:0366 advisory. - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3872, CVE-2021-3984, CVE-2021-4019 - vim is vulnerable to Use After Free CVE-2021-4192 - vim is...

PT-2022-2329

Name of the Vulnerable Software and Affected Versions Adobe After Effects versions 22.2 and earlier and 18.4.4 and earlier Description The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-42018: Heap-based Buffer Overflow

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2100NC, RUGGEDCOM M2200, RUGGEDCOM M2200F, RUGGEDCOM M2200NC, RUGGEDCOM M969...

CVE-2021-40058

There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability...

Autodesk AutoCAD PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PD...

PT-2022-11185

Name of the Vulnerable Software and Affected Versions System components affected versions not specified Description The issue is a heap-based buffer overflow in system components. Successful exploitation may affect system stability. Recommendations At the moment, there is no information about a...

PT-2022-11181

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability. Recommendations At the moment,...

PT-2022-11179

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description A heap-based buffer overflow issue exists in the video framework, which could impact availability upon successful exploitation. Recommendations At the moment, there is no information abou...

CVE-2021-40058: Out-of-bounds Write

There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability...

CVE-2021-40064: Out-of-bounds Write

There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability...

CVE-2021-40060: Out-of-bounds Write

There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability...

Autodesk AutoCAD PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PI...

Debian DLA-2937-1 : gif2apng - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2937 advisory. Three issues have been discovered in gif2apng: tool for converting animated GIF images to APNG format. CVE-2021-45909 heap-based buffer overflow vulnerability in t...

CVE-2022-26495

In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists for the NBDOPTINFO,...

Integer overflow

In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists for the NBDOPTINFO,...