19732 matches found
PT-2024-6199 · Unknown +2 · Hdf5 Library +2
Name of the Vulnerable Software and Affected Versions: HDF5 Library versions prior to 1.14.4 Description: The issue is related to a heap-based buffer overflow in the H5T get native type function in the H5Tnative.c file of the HDF5 Library. This overflow can result in the corruption of the...
PT-2024-6189 · Unknown +2 · Hdf5 Library +2
Name of the Vulnerable Software and Affected Versions: HDF5 Library versions prior to 1.14.4 Description: The issue is related to a heap buffer overflow in the H5S point deserialize function located in the H5Spoint.c file of the HDF5 Library. This overflow can be exploited by a remote attacker to...
PT-2024-6195 · Unknown +2 · Hdf5 Library +2
Name of the Vulnerable Software and Affected Versions: HDF5 Library versions 1.14.3 and earlier Description: The issue is related to an out-of-bounds read operation in the H5FL arr malloc function in the H5FL.c file of the HDF5 Library, which is called from H5S set extent simple in H5S.c. This ca...
Google Chrome Security Update (stable-channel-update-for-desktop_7-2024-05) - Windows
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
Google Chrome Security Update (stable-channel-update-for-desktop_7-2024-05) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
ytnef: Multiple Vulnerabilities
Background ytnef is a TNEF stream reader for reading winmail.dat files. Description The TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service and potentially code execution due to a double free which can be triggered via a crafted file. The SwapWord...
GLSA-202405-24 : ytnef: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202405-24 ytnef: Multiple Vulnerabilities - In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial- of-service and potentially code execution due to a double free which can be...
Google Chrome Security Update (stable-channel-update-for-desktop_7-2024-05) - Linux
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
Microsoft Edge (Chromium) < 109.0.1518.140 Heap Buffer Overflow Vulnerability
The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 109.0.1518.140. It is, therefore, affected by a heap buffer vulnerability in WebP as referenced in the September 15, 2023 advisory. Note that Nessus has not tested for these issues but has instead relied only ...
Debian dsa-5683 : chromium - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5683 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5683-1 [email protected] https://www.debian.org/securit...
CVE-2024-23709
In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2024-23709
In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2024-23709
CVE-2024-23709 describes a heap-buffer-overflow/out-of-bounds write in multiple locations that can lead to remote information disclosure without additional execution privileges, with user interaction required for exploitation. Connected sources confirm Android’s Android Security Bulletin details:...
CVE-2024-4559
Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2024-4559
Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-4559
CVE-2024-4559 is a heap buffer overflow in WebAudio used by Google Chrome before version 124.0.6367.155. Multiple connected sources (Debian DSA-5683-1, CNVD-2024-36094, GLSA entries, Astra Linux security bulletin) corroborate this vulnerability in Chromium-based Chrome/WebAudio. Impact is describ...
CVE-2024-4559
Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-4559
Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Advisory ROSA-SA-2024-2414
software: upx 4.2.1 OS: ROSA-CHROME packageevrstring: upx-4.2.1-1 CVE-ID: CVE-2023-23456 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A heap buffer overflow problem was discovered in UPX in PackTmt::pack in the file ptmt.cpp. This thread allows an attacker to cause a denial of service interrupt using...
