19738 matches found
CVE-2023-40295: Out-of-bounds Write
libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...
CVE-2023-40294: Out-of-bounds Write
libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...
CVE-2023-40305: Out-of-bounds Write
GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file...
CVE-2023-40294
libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...
CVE-2023-40305
GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file...
CVE-2023-40295
libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...
CVE-2023-40305
GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file...
PT-2023-27372
Name of the Vulnerable Software and Affected Versions GNU indent version 2.2.13 Description The issue is a heap-based buffer overflow in the search brace function in indent.c via a crafted file. Additionally, there is a heap overread in the lexi function. Recommendations For GNU indent version...
CVE-2023-39946: Heap-based Buffer Overflow
eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6, heap can be overflowed by providing a PIDPROPERTYLIST parameter that contains a CDR string with length larger than the size of...
CVE-2023-39947: Heap-based Buffer Overflow
eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6, even after the fix at commit 3492270, malformed PIDPROPERTYLIST parameters cause heap overflow at a different program counter. Th...
SUSE SLED15: libwireshark15 / libwiretap12 / libwsutil13 / wireshark / etc (SUSE-SU-2023:3252-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3252-1 advisory. Update to Wireshark 3.6.15: - Further features, bug fixes and updated protocol support as listed...
CVE-2023-38212
Adobe Dimension version 3.4.9 is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Heap overflow
Adobe Dimension version 3.4.9 is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2023-2905
CVE-2023-2905 affects Cesanta Mongoose (embedded web server). The vulnerability is a heap-based buffer overflow caused by not validating the length of MQTT_CMD_PUBLISH parsed messages with a variable-length header in version 7.10. Versions 7.9 and earlier are not affected; the issue is resolved i...
CVE-2023-2905
Due to a failure in validating the length of a provided MQTTCMDPUBLISH parsed message with a variable length header, Cesanta Mongoose, an embeddable web server, version 7.10 is susceptible to a heap-based buffer overflow vulnerability in the default configuration. Version 7.9 and prior does not...
CVE-2023-2905 Cesanta Mongoose MQTT Message Parsing Heap Overflow
Due to a failure in validating the length of a provided MQTTCMDPUBLISH parsed message with a variable length header, Cesanta Mongoose, an embeddable web server, version 7.10 is susceptible to a heap-based buffer overflow vulnerability in the default configuration. Version 7.9 and prior does not...
CVE-2023-2905: Heap-based Buffer Overflow
Due to a failure in validating the length of a provided MQTTCMDPUBLISH parsed message with a variable length header, Cesanta Mongoose, an embeddable web server, version 7.10 is susceptible to a heap-based buffer overflow vulnerability in the default configuration. Version 7.9 and prior does not...
CVE-2023-38212: Heap-based Buffer Overflow
Adobe Dimension version 3.4.9 is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...