CVE-2024-11477 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability

7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary dependi...

CVE-2024-11477

CVE-2024-11477 affects 7-Zip via the Zstandard decompression path. The root cause is improper validation of input data in Zstandard decompression, allowing an integer underflow that can lead to arbitrary code execution in the process. Public writeups (ZDI-24346) describe the underlying flaw; mult...

CVE-2024-11477 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability

7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary dependi...

SUSE CVE-2024-11477

7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary dependi...

7-Zip < 24.07 RCE (ZDI-24-1532)

The version of 7-Zip installed on the remote host is prior to 24.07. It is, therefore, affected by a remote code execution vulnerability as referenced in the ZDI-24-1532 advisory. - This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interactio...

7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the implementation of...

Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft

CVE-2024-38063 PoC | DKob & N3TCR4SH Overview This scr...

Fedora 37 : qemu (2022-4387579e67)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-4387579e67 advisory. vga: avoid crash if no default vga card rhbz2095639 lsi53c895a: fix use-after-free in lsidomsgout CVE-2022-0216 vnc-clipboard: fix integer underflow...

CVE-2024-49514

Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2024-49514

Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2024-49514 Photoshop Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)

Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2024-49514 Photoshop Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)

Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2024-49514

The CVE-2024-49514 issue affects Adobe Photoshop Desktop—specifically versions 24.7.3, 25.11 and earlier—where an Integer Underflow (Wrap or Wraparound) in certain file handling could lead to arbitrary code execution in the user context. The vulnerability requires user interaction: a victim must ...

freerdp: integer underflow in nsc_rle_decode

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 and have connections to servers using the NSC codec are vulnerable to integer underflow. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, do not...

PT-2024-8728 · Adobe · Photoshop

Name of the Vulnerable Software and Affected Versions: Adobe Photoshop Desktop versions 24.7.3, 25.11 and earlier Description: The issue is related to an Integer Underflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

PT-2025-18832

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where the packet length retrieved from a descriptor may be larger than the actual socket buffer length, leading to a leak of kernel memory...

Adobe Photoshop 24.x < 24.7.4 / 25.x < 25.12 Vulnerability (APSB24-89)

The version of Adobe Photoshop installed on the remote Windows host is prior to 24.7.4/25.12. It is, therefore, affected by a vulnerability as referenced in the apsb24-89 advisory. - Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow Wrap or Wraparound...

Adobe Photoshop 24.x < 24.7.4 / 25.x < 25.12 Vulnerability (macOS APSB24-89)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 24.7.4/25.12. It is, therefore, affected by a vulnerability as referenced in the apsb24-89 advisory. - Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow Wrap or...

PT-2024-8476

The vulnerable software is 7-Zip, a widely used file compression utility. The issue arises from an integer underflow in the Zstandard decompression implementation, allowing remote attackers to execute arbitrary code on affected installations of 7-Zip by crafting specially designed archive files. ...

CVE-2024-20474

A vulnerability in Internet Key Exchange version 2 IKEv2 processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service DoS of Cisco Secure Client. This vulnerability is due to an integer underflow condition. An attacker could exploit this...