Lucene search
K

4756 matches found

Tenable Nessus
Tenable Nessus
added 2024/12/13 12:0 a.m.10 views

Siemens Solid Edge SSA-730188 Integer Underflow Vulnerability

The version of Siemens Solid Edge installed on the remote Windows host is prior to 224.00.10.04. It is, therefore, affected by integer underflow vulnerability which can be triggered while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the curre...

7.8CVSS6.1AI score0.00165EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2024/12/12 7:52 p.m.11 views

CVE-2024-47546

A flaw was found in the GStreamer library. Integer underflow in the MP4/MOV demuxer can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash...

6.2CVSS6.2AI score0.01051EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2024/12/12 4:22 p.m.11 views

CVE-2024-47596

A flaw was found in the GStreamer library. An integer underflow due to missing size checks in the MP4/MOV demuxer can lead to out-of-bounds reads and cause crashes for certain input files. This issue can allow a malicious actor to trigger a crash of the application...

5.1CVSS6.7AI score0.01111EPSS
Exploits0References6
NVD
NVD
added 2024/12/12 2:3 a.m.6 views

CVE-2024-47606

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended...

9.8CVSS0.01344EPSS
Exploits0References6
OSV
OSV
added 2024/12/12 2:3 a.m.3 views

AZL-62366 CVE-2024-47606 affecting package gstreamer1 1.20.0-2

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended...

9.8CVSS7.6AI score0.01344EPSS
Exploits0References1
NVD
NVD
added 2024/12/12 2:3 a.m.13 views

CVE-2024-47545

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemuxparsetrak function within qtdemux.c. During the strf parsing case, the subtraction size -= 40 can lead to a negative integer overflow if it is less than 40. If this happen...

7.5CVSS0.01051EPSS
Exploits0References4
OSV
OSV
added 2024/12/12 2:3 a.m.4 views

AZL-62357 CVE-2024-47545 affecting package gstreamer1 1.20.0-2

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemuxparsetrak function within qtdemux.c. During the strf parsing case, the subtraction size -= 40 can lead to a negative integer overflow if it is less than 40. If this happen...

7.5CVSS7.1AI score0.01051EPSS
Exploits0References1
NVD
NVD
added 2024/12/12 2:3 a.m.5 views

CVE-2024-47546

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extractccfromdata function within qtdemux.c. In the FOURCCc708 case, the subtraction atomlength - 8 may result in an underflow if atomlength is less than 8. When that subtraction...

7.5CVSS0.01051EPSS
Exploits0References4
OSV
OSV
added 2024/12/12 2:3 a.m.1 views

DEBIAN-CVE-2024-47546

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extractccfromdata function within qtdemux.c. In the FOURCCc708 case, the subtraction atomlength - 8 may result in an underflow if atomlength is less than 8. When that subtraction...

7.5CVSS6.5AI score0.01051EPSS
Exploits0References1
OSV
OSV
added 2024/12/12 2:3 a.m.1 views

DEBIAN-CVE-2024-47545

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemuxparsetrak function within qtdemux.c. During the strf parsing case, the subtraction size -= 40 can lead to a negative integer overflow if it is less than 40. If this happen...

7.5CVSS6.7AI score0.01051EPSS
Exploits0References1
OSV
OSV
added 2024/12/12 1:40 a.m.3 views

CVE-2024-11950

XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of XnSoft XnView Classic. User interaction is required to exploit this vulnerability in that the target must...

8.8CVSS6.2AI score
Exploits0References1
NVD
NVD
added 2024/12/12 1:40 a.m.14 views

CVE-2024-11950

XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of XnSoft XnView Classic. User interaction is required to exploit this vulnerability in that the target must...

8.8CVSS0.0049EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/11 9:54 p.m.12 views

CVE-2024-11950 XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability

XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of XnSoft XnView Classic. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS7.5AI score0.0049EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/11 9:54 p.m.13 views

CVE-2024-11950 XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability

XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of XnSoft XnView Classic. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS0.0049EPSS
Exploits0References1
CVE
CVE
added 2024/12/11 9:54 p.m.77 views

CVE-2024-11950

CVE-2024-11950 affects XnSoft XnView Classic due to an integer underflow in RWZ file parsing. The flaw allows code execution via remote attacker control after user visits a malicious page or opens a malicious RWZ, with the issue arising from inadequate validation of input data and an underflow be...

8.8CVSS8AI score0.0049EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/12/11 7:12 p.m.202 views

CVE-2024-47606

CVE-2024-47606 (GStreamer) affects the qtdemux_parse_theora_extension path in GStreamer’s qtdemux.c, where an integer underflow causes an oversized allocation followed by a memory overwrite that can hijack execution. Public reports indicate the vulnerability exists in GStreamer core plus plugins-...

9.8CVSS7.5AI score0.01344EPSS
Exploits0References6Affected Software1
Debian CVE
Debian CVE
added 2024/12/11 7:12 p.m.7 views

CVE-2024-47606

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended...

9.8CVSS8.1AI score0.01344EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2024/12/11 7:12 p.m.14 views

CVE-2024-47606

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended...

9.8CVSS7.6AI score0.01344EPSS
Exploits0References6
OSV
OSV
added 2024/12/11 7:12 p.m.10 views

CVE-2024-47606 GHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended...

8.6CVSS8.2AI score0.01344EPSS
Exploits0References8
Cvelist
Cvelist
added 2024/12/11 7:1 p.m.14 views

CVE-2024-47546 GHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-read

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extractccfromdata function within qtdemux.c. In the FOURCCc708 case, the subtraction atomlength - 8 may result in an underflow if atomlength is less than 8. When that subtraction...

6.9CVSS0.01051EPSS
Exploits0References3
Rows per page
Query Builder