PT-2023-35750 · Git +1 · Cyclonedds

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the functions add complete typeobj, ddsi xt type add...

PT-2023-36075 · Admesh · Admesh

Name of the Vulnerable Software and Affected Versions: ADMesh versions prior to the fixed version Description: The issue is related to improper array index validation in the stl fix normal directions functionality. This can be exploited by providing a specially-crafted stl file, leading to a heap...

OSV-2023-271 Heap-buffer-overflow in bit_utf8_to_TU

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57589 Crash type: Heap-buffer-overflow READ 1 Crash state: bitutf8toTU dxfheaderread dwgreaddxf...

OSV-2023-270 Heap-buffer-overflow in bit_utf8_to_TU

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57587 Crash type: Heap-buffer-overflow WRITE 2 Crash state: bitutf8toTU jsonwstring jsonAppInfo...

OSV-2023-269 Heap-buffer-overflow in bit_utf8_to_TU

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57586 Crash type: Heap-buffer-overflow READ 1 Crash state: bitutf8toTU dynapisethelper dwgdynapientitysetvalue...

PT-2023-35748 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions bit utf8 to TU, dxf header read, and dwg read dxf. No information...

Fedora 38 : mingw-binutils (2023-15c6e4be28)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-15c6e4be28 advisory. Backport fix for CVE-2023-1579. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

PT-2023-35745 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions bit utf8 to TU, dynapi set helper, and dwg dynapi entity set valu...

PT-2023-35747 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 2 crash has been reported, involving functions such as bit utf8 to TU, json wstring, and json AppInfo. No information is...

OSV-2023-261 Heap-buffer-overflow in HtpRequestBodyHandleMultipart

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57578 Crash type: Heap-buffer-overflow READ 1 Crash state: HtpRequestBodyHandleMultipart HTPCallbackRequestBodyData htphookrunall...

OSV-2023-260 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57569 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

PT-2023-16087 · Nvidia · Nvidia Dcgm

Name of the Vulnerable Software and Affected Versions: NVIDIA DCGM for Linux affected versions not specified Description: The issue is related to a heap-based buffer overflow in the HostEngine component of NVIDIA DCGM for Linux. This can be triggered by a user through the bound socket, potentiall...

ASB-A-242544249

In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-269656722

In TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-269656636

In TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-35743 · Git +1 · Suricata

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates the involvement of...

PUB-A-269655871

In TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-269656642

In TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-269656813

In TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-14277 · Bentley · Bentley View

Name of the Vulnerable Software and Affected Versions: Bentley View affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Bentley View. It requires user interaction, where the target must visit a malicious page or op...