643 matches found
Delta Electronics DIAScreen Buffer Error Vulnerability
Delta Electronics DIAScreen is a smartphone builder from Delta Electronics, a Taiwan, China-based company. A buffer error vulnerability exists in Delta Electronics DIAScreen, which can occur due to out-of-bounds writes when parsing specially crafted input files...
CVE-2023-5068: Out-of-bounds Write
Delta Electronics DIAScreen may write past the end of an allocated buffer while parsing a specially crafted input file. This could allow an attacker to execute code in the context of the current process...
Medium: php72-pecl-imagick
Issue Overview: ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service. CVE-2017-1000476 The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability th...
USN-6282-1 velocity-tools vulnerability
Jackson Henry discovered that Velocity Tools incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code...
Out-of-Bounds Read
nvidia-cuda-toolkit is vulnerable to Out-of-Bounds Read. The vulnerability exists in cuobjdump which allows an attacker to cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file...
PT-2023-7337 · Fuji Electric · Fuji Electric Tellus Lite V-Simulator
Name of the Vulnerable Software and Affected Versions: Fuji Electric Tellus Lite V-Simulator affected versions not specified Description: The issue is related to the parsing of a specially-crafted input file by Fuji Electric Tellus Lite V-Simulator, which may lead to an out of bounds write. This...
This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory.
A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability...
Arbitrary Code Execution
libopenbabel.so is vulnerable to Arbitrary Code Execution. The vulnerability exists when parsing an input file via ReadMolecule at groformat.cpp which allows an attacker to inject and execute arbitrary code using a specially crafted malformed file...
The vulnerability of the Windows Geolocation service in the Windows operating system allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows Geolocation service in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a perpetrator to execute arbitrary code using a specially created file...
USN-6179-1 libjettison-java vulnerability
It was discovered that Jettison incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service...
ROS-20230615-01
LibRaw image processing library vulnerability is related to heap buffer overflow in raw2imageex. Exploitation of the vulnerability could allow an attacker acting remotely to cause an application to application crash due to a maliciously crafted input file...
USN-6158-1 node-fetch vulnerability
It was discovered that Node Fetch incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to obtain sensitive information...
USN-6144-1: LibreOffice vulnerabilities
It was discovered that LibreOffice did not properly validate the number of parameters passed to the formula interpreter, leading to an array index underflow attack. If a user were tricked into opening a specially crafted spreadsheet file, an attacker could possibly use this issue to execute...
USN-6116-1 node-hawk vulnerability
It was discovered that hawk incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service...
USN-6082-1: EventSource vulnerability
It was discovered that EventSource incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to obtain sensitive information...
USN-6082-1 node-eventsource vulnerability
It was discovered that EventSource incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to obtain sensitive information...
USN-6016-1 node-thenify vulnerability
It was discovered that thenify incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code...
Input validation
DISPUTED LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the LLVM security policy excludes "Language front-ends ... for which a malicious input file can cause undesirable behavior."...
CVE-2023-26924
LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the LLVM security policy excludes "Language front-ends ... for which a malicious input file can cause undesirable behavior."...