19625 matches found
CVE-2024-41439
A heap buffer overflow in the function cpblock /vendor/cutepng.h of hicolor v0.5.0 allows attackers to cause a Denial of Service DoS via a crafted PNG file...
CVE-2024-41437
A heap buffer overflow in the function cpunfilter /vendor/cutepng.h of hicolor v0.5.0 allows attackers to cause a Denial of Service DoS via a crafted PNG file...
CVE-2024-41439
A heap buffer overflow in the function cpblock /vendor/cutepng.h of hicolor v0.5.0 allows attackers to cause a Denial of Service DoS via a crafted PNG file...
CVE-2024-41439
CVE-2024-41439 – hicolor v0.5.0 is affected by a heap buffer overflow in the function cp_block() (in /vendor/cute_png.h), enabling a Denial of Service via a crafted PNG file. The vulnerability arises from cp_block() handling that can overflow heap memory. A PoC exists (per references) and may be ...
Security update for assimp (moderate)
openSUSE Security Update: Security update for assimp Announcement ID: openSUSE-SU-2024:0225-1 Rating: moderate References: 1218474 1228142 Cross-References: CVE-2024-40724 CVSS scores: CVE-2024-40724 SUSE: 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports...
SUSE SLES12 Security Update : giflib (SUSE-SU-2024:2607-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2607-1 advisory. - CVE-2022-28506: Fixed heap buffer overflow in function DumpScreen2RGB bsc1198880 - CVE-2023-39742: Fixed segmentation fault via t...
Huawei EulerOS: Security Advisory for edk2 (EulerOS-SA-2024-2068)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for xorg-x11-server (EulerOS-SA-2024-2067)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2024:2607-1 Security update for giflib
This update for giflib fixes the following issues: - CVE-2022-28506: Fixed heap buffer overflow in function DumpScreen2RGB bsc1198880 - CVE-2023-39742: Fixed segmentation fault via the component getarg.c bsc1214678...
Chromium: CVE-2024-6994 Heap buffer overflow in Layout
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
OSV-2024-679 Heap-buffer-overflow in readImage4v2
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70554 Crash type: Heap-buffer-overflow WRITE 1 Crash state: readImage4v2 PCXHandler::read kimgiofuzzer.cc...
KLA71043 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1...
Microsoft Edge (Chromium) < 127.0.2651.74 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 127.0.2651.74. It is, therefore, affected by multiple vulnerabilities as referenced in the July 25, 2024 advisory. - Microsoft Edge Chromium-based Information Disclosure Vulnerability CVE-2024-38103 - Use after free in...
EulerOS Virtualization 3.0.6.0 : xorg-x11-server (EulerOS-SA-2024-2067)
According to the versions of the xorg-x11-server packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an...
EulerOS Virtualization 3.0.6.0 : edk2 (EulerOS-SA-2024-2068)
According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable function, allowing a user to trigger a heap buffer overflow via a...
PT-2024-7521 · Autodesk · Autodesk Autocad
Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted SLDPRT file can cause a Heap Based Buffer Overflow when parsed in odxsw dll.dll through Autodesk AutoCAD. This issue can be leveraged by a malicious actor to...
USN-6827-1: LibTIFF vulnerability | Cloud Foundry
Severity Low Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that LibTIFF incorrectly handled memory when performing certain cropping operations, leading to a heap buffer overflow. An attacker could use...
PT-2024-40825 · Git +1 · Kimageformats
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow write error. Technical details include a crash type of Heap-buffer-overflow WRITE 1. The crash state...
Huawei EulerOS: Security Advisory for xorg-x11-server (EulerOS-SA-2024-2063)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for tigervnc (EulerOS-SA-2024-2062)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...