Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : VLC media player vulnerabilities (USN-6180-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6180-1 advisory. It was discovered that VLC could be made to read out of bounds when decoding image files. If a user were tricked into...

Out-of-bounds Write

erofs-utils is vulnerable to Out-of-bounds Write. The vulnerability is in the 'erofsreadonedata' function within 'data.c' which allows a malicious attacker to execute arbitrary code with a crafted erofs filesystem image leading to a heap-based buffer overflow...

CVE-2023-3291

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2...

Fortinet FortiOS Remote Code Execution Vulnerability

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A security vulnerability exists i...

CVE-2023-34474

CVE-2023-34474 is an ImageMagick vulnerability involving a heap-based buffer overflow in ReadTIM2ImageData() (coders/tim2.c). A local attacker can entice a user to open a crafted TIM file, causing an out-of-bounds read that may crash the application and lead to a denial of service. Public referen...

CVE-2023-34474

A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service...

CVE-2023-3291 Heap-based Buffer Overflow in gpac/gpac

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2...

PT-2023-24900

Name of the Vulnerable Software and Affected Versions ImageMagick affected versions not specified Description A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData function in coders/tim2.c. A local attacker could trick the user into opening a specially crafted file...

CVE-2023-3291

CVE-2023-3291 concerns the GPAC multimedia framework (gpac/gpac) with a heap-based buffer overflow in versions prior to 2.2.2. Public advisories (Debian DSA-5452-1) state these issues could lead to a denial of service or the execution of arbitrary code. Other sources reiterate the affected compon...

CVE-2023-32025: Heap-based Buffer Overflow

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2023-32026: Heap-based Buffer Overflow

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2023-34474: Heap-based Buffer Overflow

A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service...

CVE-2023-3291: Heap-based Buffer Overflow

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-32027: Heap-based Buffer Overflow

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...

CVE-2023-32028: Heap-based Buffer Overflow

Microsoft SQL OLE DB Remote Code Execution Vulnerability...

CVE-2023-34474

A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service...

(0Day) Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

(0Day) Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

CVE-2023-24897: Heap-based Buffer Overflow

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability...

CVE-2023-27997

A heap-based buffer overflow vulnerability CWE-122 in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, version 1.2 all versions, version 1.1 all...