CVE-2023-1810

CVE-2023-1810 corresponds to a heap buffer overflow in Visuals of Google Chrome/Chromium before 112.0.5615.49. The issue allows a remote attacker who has compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Severity is High (CVSS v3.1 base score 8.8). A...

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google Inc. in the United States. A security vulnerability exists in Google Chrome Visuals that stems from the presence of a heap buffer overflow issue...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 112 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 112.0.5615.49 Linux and Mac, 112.0.5615.49/50 Windows contains a number of fixes and improvements -- a list of changes is...

Google Chrome < 112.0.5615.49 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 112.0.5615.49. It is, therefore, affected by multiple vulnerabilities as referenced in the 202304stable-channel-update-for-desktop advisory. - Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.4...

Google Chrome < 112.0.5615.49 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 112.0.5615.49. It is, therefore, affected by multiple vulnerabilities as referenced in the 202304stable-channel-update-for-desktop advisory. - Heap buffer overflow in Browser History in Google Chrome prior to...

ADMesh improper array index validation

An improper array index validation vulnerability exists in the stlfixnormaldirections functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

GHSA-V5HV-4PW3-Q6H9 ADMesh improper array index validation

An improper array index validation vulnerability exists in the stlfixnormaldirections functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2022-38072

An improper array index validation vulnerability exists in the stlfixnormaldirections functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

PYSEC-2023-263

An improper array index validation vulnerability exists in the stlfixnormaldirections functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2022-38072

An improper array index validation vulnerability exists in the stlfixnormaldirections functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

Vulnerability Spotlight: Buffer overflow vulnerability in ADMesh library

Francesco Benvenuto of Cisco Talos discovered this vulnerability. Cisco Talos recently discovered an improper array index validation vulnerability in a functionality of the ADMesh library. ADMesh is a C library used to process 3-D triangular meshes. Talos found an improper array index validation...

CVE-2022-38072

An improper array index validation vulnerability exists in the stlfixnormaldirections functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2022-38072

CVE-2022-38072 affects ADMesh (Master commit 767a105 and v0.98.4). The vulnerability resides in the stl_fix_normal_directions function due to improper array index validation, leading to a heap buffer overflow when processing crafted STL files. An attacker can trigger this via a malicious STL inpu...

CVE-2022-38072

An improper array index validation vulnerability exists in the stlfixnormaldirections functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2022-38072

An improper array index validation vulnerability exists in the stlfixnormaldirections functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

OSV-2023-273 Heap-buffer-overflow in add_complete_typeobj

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57614 Crash type: Heap-buffer-overflow READ 8 Crash state: addcompletetypeobj ddsixttypeaddtypeobj ddsitypeaddtypeobj...

OSV-2023-272 Heap-buffer-overflow in unsigned long simdutf::haswell::convert_masked_utf8_to_utf16<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57632 Crash type: Heap-buffer-overflow WRITE Crash state: unsigned long simdutf::haswell::convertmaskedutf8toutf16 simdutf::haswell::implementation::convertutf8toutf16le roundtrip.cc...

PT-2023-35749 · Simdutf · Simdutf

Name of the Vulnerable Software and Affected Versions: simdutf affected versions not specified Description: The issue is related to a heap buffer overflow error. It occurs in the simdutf::haswell::convert masked utf8 to utf16 function, specifically in the simdutf::haswell::implementation::convert...

ADMesh stl_fix_normal_directions improper array index validation vulnerability

Talos Vulnerability Report TALOS-2022-1594 ADMesh stlfixnormaldirections improper array index validation vulnerability April 3, 2023 CVE Number CVE-2022-38072 SUMMARY An improper array index validation vulnerability exists in the stlfixnormaldirections functionality of ADMesh Master Commit 767a10...

PT-2023-35750 · Git +1 · Cyclonedds

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the functions add complete typeobj, ddsi xt type add...