CVE-2023-0866

CVE-2023-0866 concerns the GPAC multimedia framework (gpac/gpac) prior to 2.3.0-DEV, with a heap-based buffer overflow vulnerability. The connected sources confirm the issue affects GPAC and describe the underlying flaw as a heap-based overflow. Debian advisories (DSA-5411-1) and related OSS/OSV ...

Adobe Animate Code Execution Vulnerabilities (APSB23-15) - Windows

The host is missing an important security update according to Adobe Animate February 2023 update. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2023-0841

A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3dmxprocess of the file filters/reframemp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been...

CVE-2023-0841

GPAC 2.3-DEV-rev40-g3602a5ded is affected by a vulnerability in the mp3_dmx_process function (filters/reframe_mp3.c) that causes a heap-based buffer overflow. The issue is exploitable remotely, with public disclosure of exploits. Affected component appears to be the mp3 demuxing path inside GPAC....

CVE-2023-0841

A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3dmxprocess of the file filters/reframemp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been...

Out-of-bounds Write

freedroidrpg:sid is vulnerable to Out-of-bounds Write. vulnerability in 'map.c' within 'FreedroidRPG 1.0rc2' copies data from a file into a fixed size buffer without verifying its size. this can lead to heap-based buffer overflow...

CVE-2023-24550

Solid Edge heap-based buffer overflow CVE-2023-24550 affects Solid Edge SE2022 (all versions) and SE2023 (all versions) via parsing of specially crafted PAR files, enabling potentially code execution in the current process. The root cause is a heap-buffer issue during PAR file parsing. Siemens Pr...

Heap-Based Buffer Overflow

ring:sid is vulnerable to Heap-Based Buffer Overflow. An attacker is able to cause buffer over read by parsing a specially crafted STUN message with unknown attribute via multiple functions. This only affects applications using STUN including PJNATH and PJSUA-LIB...

Adobe Animate 22.x < 22.0.9 / 23.x < 23.0.1 Multiple Vulnerabilities (APSB23-15)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 22.0.9 or 23.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-15 advisory. - Adobe Animate versions 22.0.8 and earlier and 23.0.0 and earlier are affected by a Use After...

SUSE SLED15: libtiff-devel / libtiff-devel-32bit / libtiff5 / libtiff5-32bit / etc (SUSE-SU-2023:0342-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0342-1 advisory. - CVE-2022-48281: Fixed a buffer overflow that could be triggered via a crafted image bsc1207413. Tenable...

Adobe Animate 22.x < 22.0.9 / 23.x < 23.0.1 Multiple Vulnerabilities (APSB23-15)

The version of Adobe Animate installed on the remote Windows host is prior to 22.0.9 or 23.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-15 advisory. - Adobe Animate versions 22.0.8 and earlier and 23.0.0 and earlier are affected by a Use After Free...

CVE-2023-0819 Heap-based Buffer Overflow in gpac/gpac

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to v2.3.0-DEV...

Fedora 37 : vim (2023-2db4df65c3)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-2db4df65c3 advisory. The newest upstream commit Security fixes for CVE-2023-0433, CVE-2022-47024 Tenable has extracted the preceding description block directly from the...

Heap-based Buffer Overflow

linux is vulnerable to Heap-based Buffer Overflow. A local attacker is able to cause heap-based buffer overflows when a user connects to a malicious USB device which allows the attacker to crash the system or escalate their privileges...

Heap overflow

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode clusters...

CVE-2022-34454

CVE-2022-34454 affects Dell PowerScale OneFS versions 8.2.x–9.3.x with a heap-based buffer overflow in processing untrusted input, enabling a local privileged attacker to potentially take over the system. Impact is noted for compliance mode clusters. Root cause described as a boundary/heap-relate...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-1403)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the...

EulerOS 2.0 SP10 : samba (EulerOS-SA-2023-1371)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal. The DES and...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-1375)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2023-1371)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...